PT-2026-138034

CVE-2026-106020

·

Published

2026-11-06

·

Updated

2026-11-06

Description by

CVSS 4.0
8.6
High
MetricsAV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking.
This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-1427: Improper Neutralization of Input Used for LLM Prompting
Related identifiers
CVE-2026-106020
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com