Medium severityNVD Advisory· Published Jun 11, 2025· Updated Apr 15, 2026

CVE-2025-26383

Description

The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/iSTAR Configuration Utility (ICU)llm-fuzzy

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-25-146-01nvd
www.johnsoncontrols.com/trust-center/cybersecurity/security-advisoriesnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000