CVE-2026-64894

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106020

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0...

CVE-2026-106022

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

EUVD-2026-118268

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-64894

The Johnson Controls EasyIO Neo IOManager and Tools Installer (version 1.1.0.0 ) are vulnerable to an inclusion of functionality from untrusted control sphere vulnerability. This flaw allows for a Malicious Software Update . The vulnerability is associated with CWE-829 . No specific remediation s...

CVE-2026-64894

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106022

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

EUVD-2026-118265

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106022

Johnson Controls EasyIO Neo IOManager and Tools Installer (version 1.1.0.0 ) are affected by a vulnerability involving the cleartext storage of sensitive information in memory . This flaw allows an attacker to Retrieve Embedded Sensitive Data . The vulnerability is associated with CWE-316 . No sp...

CVE-2026-106020

Johnson Controls EasyIO Neo IO Manager and Tools Installer version 1.1.0.0 are affected by an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427). This flaw allows for Search Order Hijacking . The vulnerability is associated with a CVSS 4.0 score of 8.6 (High) , where...

CVE-2026-64894: Johnson Controls EasyIO Neo IOManager and Tools Installer: Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and…

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106022: Johnson Controls EasyIO Neo IOManager and Tools Installer: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools…

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106020: Johnson Controls EasyIO Neo IO Manager and Tools Installer: Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and…

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0...

XenServer and Citrix Hypervisor Security Update for CVE-2025-27462, CVE-2025-27463, CVE-2025-27464

Description of Problem Issues have been identified in the XenServer VM Tools for Windows that allow an attacker who has the ability to execute arbitrary unprivileged code within a guest Windows VM to compromise that same VM. This issue affects Windows VMs running on either XenServer 8.4 and Citri...

Important: Red Hat Security Advisory: rhev-guest-tools-iso security and bug fix update

An updated rhev-guest-tools-iso package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...