Login Request a demo
High severity · published Oct 1, 2026
CVE-2026-34494
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations
7.2
CVSS
0.2%
EPSS
No
On KEV
Description
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Neo Series MVP2 · Johnson Controls
before 3.3b63 · source: vendor
Affected product
NS
Neo Series MVP2
Johnson Controls
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-34494
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-34494
www.johnsoncontrols.com
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories