https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T09:14:55.925400+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-64893 fkie_cve-2026-64893 2026-10-02T09:14:58.133546+00:00

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.

This issue affects EasyIO NEO: before 3.3b25.

 https://vulnerability.circl.lu/vuln/ghsa-7qm5-3w7w-vwh7 GHSA-7qm5-3w7w-vwh7 2026-10-02T09:14:58.133744+00:00

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.

This issue affects EasyIO NEO: before 3.3b25.

 https://vulnerability.circl.lu/vuln/icsa-26-274-05 ICSA-26-274-05 — Johnson Controls EasyIO Neo Series EC and CW Controllers 2026-10-02T09:14:58.133786+00:00

Johnson Controls is aware of a vulnerability in EasyIO Neo which may allow an attacker to intercept and read sensitive information, including credentials and session data, transmitted in cleartext over the network. Successful exploitation could result in technical or operational impact. EasyIO Neo is a programmable building automation edge controller used to manage and automate HVAC, lighting, and energy systems in commercial buildings through a web-based interface.