What is GHSA-w5q8-fpmg-jrm2?

GHSA-w5q8-fpmg-jrm2 is a security advisory published by GitHub Security Advisories with High severity. Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO...

Which CVE IDs does GHSA-w5q8-fpmg-jrm2 cover?

GHSA-w5q8-fpmg-jrm2 covers the following CVE IDs: CVE-2026-64894. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-w5q8-fpmg-jrm2High

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO...

Vendor

GitHub Security Advisories

Published

November 6, 2026

Last Modified

November 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-64894 →

📋 Description

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update.

This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-64894
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
https://github.com/advisories/GHSA-w5q8-fpmg-jrm2