ICSA-26-274-04

Johnson Controls EasyIO Neo Edge Controllers Vulnerable to Cleartext Credential Interception and Data Disclosure (CVE-2026-64892)

CISA advisories ICSA-26-274-04 and ICSA-26-274-05 warn of cleartext credential and session disclosure in Johnson Controls EasyIO Neo building controllers.