CVE-2026-64894: Security vulnerability

Published Nov 6, 2026

Updated

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update.

This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.

Event History

Nov 6, 2026

CVE Published

via MITRE·02:12 PM

Data Sourced

via MITRE·02:12 PM

DescriptionWeakness

Frequently Asked Questions

Which product version is identified as affected?

The issue affects Johnson Controls EasyIO Neo IOManager and Tools Installer version 1.1.0.0.

What type of attack does this vulnerability enable?

It allows a malicious software update through inclusion of functionality from an untrusted control sphere.

CVE-2026-64894: Security vulnerability

Event History

Frequently Asked Questions

Which product version is identified as affected?

What type of attack does this vulnerability enable?

Company

Resources

Contact

Frequently Asked Questions

Which product version is identified as affected?

What type of attack does this vulnerability enable?