Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility

CVE-2025-26386

What is CVE-2025-26386?

The iSTAR Configuration Utility (ICU) by Johnson Controls is susceptible to a stack-based buffer overflow. This vulnerability affects versions 6.9.7 and earlier. If exploited, it could lead to a failure of the host operating system, posing significant risk to system integrity and availability. Organizations using affected versions of the ICU should prioritize patching and review security practices to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References