CVE-2026-64893

The vulnerability in Johnson Controls EasyIO NEO prior to version 3.3b25 allows for the cleartext transmission of sensitive information, making it susceptible to man-in-the-middle attacks. This could enable an attacker to intercept and manipulate data exchanged between devices, potentially compromising system integrity and confidentiality. Organizations using affected versions of EasyIO NEO should prioritize patching to mitigate the risk of data breaches and unauthorized access.