HIGH 8.6 NVD

CVE-2026-106020

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijackin

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Published: 2026-11-06 · Source: NVD · Feed updated: 2026-11-07

This high severity vulnerability with a CVSS score of 8.6 was published on 2026-11-06 via NVD.

vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.