{"id":"CVE-2026-64894","published":"2026-11-06T15:17:22.440","lastModified":"2026-11-11T03:16:52.540","description":"Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update.\n\nThis issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-829"],"vendors":[],"products":[],"references":[{"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}