# CVE-2026-106022: Johnson Controls EasyIO Neo cleartext storage of sensitive information in memory

Source: https://junglewise.ai/threats/cve-2026-106022-cleartext-storage-of-sensitive-information-in-memory  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-06. Updated: 2026-11-06  
License: CC BY 4.0 with a link back

CVE-2026-106022 · Severity: info · Published 2026-11-06

Johnson Controls EasyIO Neo IOManager and Tools Installer stores sensitive information in cleartext in memory, allowing an attacker with local access to retrieve embedded credentials or other confidential data. This could lead to unauthorized access to building automation and control systems used in commercial facilities.

Technologies: [Johnson Controls EasyIO Neo Tools Installer](https://junglewise.ai/threats/technologies/easyio-neo-tools-installer). Vendors: [Johnson Controls](https://junglewise.ai/threats/vendors/johnson-controls).

## Quick answers

**Is CVE-2026-106022 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-106022 being exploited in the wild.

**How severe is CVE-2026-106022?** Informational severity, published 6 November 2026.

**Which products and versions are affected?** Johnson Controls EasyIO Neo IOManager 1.1.0.0; Johnson Controls EasyIO Neo Tools Installer 1.1.0.0.

**Is there a fix for CVE-2026-106022?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-106022 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-106022?** Check whether you run Johnson Controls EasyIO Neo IOManager or Johnson Controls EasyIO Neo Tools Installer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a cleartext storage issue in the IOManager and Tools Installer components, where sensitive data is held unencrypted in process memory. An attacker with local access to the system can extract this information. No patch status is currently documented.

## Affected products

- Johnson Controls EasyIO Neo IOManager 1.1.0.0
- Johnson Controls EasyIO Neo Tools Installer 1.1.0.0

## Timeline

- 2026-11-06: disclosed

## References

- [https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories](https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories)

## Related threats

- [Johnson Controls EasyIO Neo IOManager inclusion of untrusted functionality](https://junglewise.ai/threats/cve-2026-64894-inclusion-of-functionality-from-untrusted-control-sphere)
- [Johnson Controls EasyIO Neo IO Manager prompt injection vulnerability](https://junglewise.ai/threats/cve-2026-106020-improper-neutralization-of-input-used-for-llm-prompting)