CVE-2026-64894highCWE-829

CVE-2026-64894: high-severity vulnerability in Johnson Controls EasyIO Neo IOManager and…

Published

Follow this CVE+ Monitor EasyIO Neo IOManager and Tools Installer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3
Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.
CVSS:4.0/AV:P/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Johnson Controls · EasyIO Neo IOManager and Tools Installer
Related CVEs — Johnson Controls EasyIO Neo IOManager and…

In the same product, most dangerous first.

CVE-2026-106022HIGHCVE-2026-106022EPSS —