High severityNVD Advisory· Published Jan 28, 2026· Updated Apr 15, 2026

CVE-2025-26386

Description

Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version 6.9.7 and prior. Successful exploitation of this vulnerability could result in failure within the operating system of the machine hosting the ICU tool.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/iSTAR Configuration Utility (ICU)llm-create
Range: <=6.9.7

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-26-022-04nvd
www.johnsoncontrols.com/trust-center/cybersecurity/security-advisoriesnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000