Input Manipulation Flaw in Johnson Controls EasyIO Neo IO Manager and Tools Installer
CVE-2026-106020

8.6HIGH

Key Information:

Vendor

Johnson Controls

Status
Easyio Neo Io Manager And Tools Installer
Vendor
CVE Published:
6 November 2026

What is CVE-2026-106020?

An improper neutralization of input vulnerability exists in Johnson Controls EasyIO Neo IO Manager and Tools Installer. This flaw allows attackers to hijack the search order, potentially leading to unauthorized access or execution of malicious commands. It is crucial to address this vulnerability to ensure system integrity and safeguard against potential exploitation.

Affected Version(s)

EasyIO Neo IO Manager and Tools Installer 1.1.0.0

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.