CVE-2026-106020highCWE-1427

CVE-2026-106020: high-severity vulnerability in Johnson Controls EasyIO Neo IO Manager and…

Published

Follow this CVE+ Monitor EasyIO Neo IOManager and Tools Installer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6
Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Johnson Controls · EasyIO Neo IO Manager and Tools Installer