Will Johnson Controls EasyIO Neo CVEs be added to CISA KEV by Dec 2026?

CISA Alerts warns of vulnerabilities in Johnson Controls EasyIO Neo Series EC and CW Controllers that could allow attackers to intercept sensitive credentials and session data. No active exploitation or KEV listing yet reported.

Resolution Criteria

One or more Johnson Controls EasyIO Neo Series CVE(s) is officially added to CISA Known Exploited Vulnerabilities Catalog; verified via CISA.gov KEV page or official CISA alert.