CVE-2025-26379

Description

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Affected Platforms

Weakness Type

CWE-338

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02
• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories