CVE-2026-64892: Infoleak
Published Oct 1, 2026
·Updated
- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations.
This issue affects Easy IO Neo: before 3.3b63.
Affected Software
1 affected component
Johnson Controls Easy IO Neo<3.3b63
Event History
Oct 1, 2026
CVE Published
via MITRE·09:23 PM
Data Sourced
via MITRE·09:23 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Easy IO Neo versions require remediation?
The issue affects Johnson Controls Easy IO Neo versions before 3.3b63. Upgrading to 3.3b63 or a later version is indicated by the affected-version information.
2
What information could an attacker obtain?
The vulnerability allows collection of data from common resource locations, resulting in exposure of sensitive information. The available information does not identify the specific data types or resource locations involved.