CVE-2026-64893: Johnson Controls Easyio Neo

High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days.

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25.

Affected products

• Johnson Controls Easyio Neo: before 3.3b25 (fixed in 3.3b25)

Published 2026-10-01. Last modified 2026-10-02.