Cleartext Transmission Vulnerability in Johnson Controls EasyIO NEO
CVE-2026-64893

7.3HIGH

Key Information:

Vendor: Johnson Controls
Status: Easyio Neo
Vendor: CVE Published:; 1 October 2026

🔔 Create Johnson Controls Vulnerability Alert

What is CVE-2026-64893?

A vulnerability in Johnson Controls EasyIO NEO products that exposes sensitive information during transmission. This issue, inherent in versions prior to 3.3b25, can lead to man-in-the-middle attacks, allowing unauthorized parties to intercept data that should be securely transmitted. Implementing proper encryption protocols and upgrading to the latest software version can mitigate this risk.

Affected Version(s)

EasyIO NEO 0 < 3.3b25

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:

7.3

Severity:

HIGH

Confidentiality:

High

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 1, 2026
Vulnerability Reserved
Jul 20, 2026

CVE-2026-64893 Data

JSON