CVE-2025-26386 | Johnson Controls iSTAR Configuration Utility up to 6.9.7 stack-based overflow

A vulnerability described as critical has been identified in Johnson Controls iSTAR Configuration Utility up to 6.9.7. Impacted is an unknown function. The manipulation results in stack-based buffer overflow.

This vulnerability is cataloged as CVE-2025-26386. The attack may be launched remotely. There is no exploit available.