<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 21:43:05 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-64893</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-64893</link>
      <description>&lt;p&gt;- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.&lt;/p&gt;
&lt;p&gt;This issue affects EasyIO NEO: before 3.3b25.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.&lt;/p&gt;
&lt;p&gt;This issue affects EasyIO NEO: before 3.3b25.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-64893</guid>
    </item>
    <item>
      <title>GHSA-7qm5-3w7w-vwh7</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-7qm5-3w7w-vwh7</link>
      <description>&lt;p&gt;- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.&lt;/p&gt;
&lt;p&gt;This issue affects EasyIO NEO: before 3.3b25.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.&lt;/p&gt;
&lt;p&gt;This issue affects EasyIO NEO: before 3.3b25.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-7qm5-3w7w-vwh7</guid>
    </item>
    <item>
      <title>ICSA-26-274-05 — Johnson Controls EasyIO Neo Series EC and CW Controllers</title>
      <link>https://vulnerability.circl.lu/vuln/icsa-26-274-05</link>
      <description>&lt;p&gt;Johnson Controls is aware of a vulnerability in EasyIO Neo which may allow an attacker to intercept and read sensitive information, including credentials and session data, transmitted in cleartext over the network. Successful exploitation could result in technical or operational impact. EasyIO Neo is a programmable building automation edge controller used to manage and automate HVAC, lighting, and energy systems in commercial buildings through a web-based interface.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Johnson Controls is aware of a vulnerability in EasyIO Neo which may allow an attacker to intercept and read sensitive information, including credentials and session data, transmitted in cleartext over the network. Successful exploitation could result in technical or operational impact. EasyIO Neo is a programmable building automation edge controller used to manage and automate HVAC, lighting, and energy systems in commercial buildings through a web-based interface.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/icsa-26-274-05</guid>
    </item>
  </channel>
</rss>
