CVE-2025-26379

Published: Dec 22, 2025

Modified: Dec 22, 2025

PUBLISHED

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Vendor	Product	Versions
Johnson Controls	IQ Panels2, 2+, IQHub, IQPanel 4, PowerG	affected `IQ Panels2 - <= 2` affected `IQ Panel 2+ - <= 2+` affected `IQHub` affected `IQPanel 4 - <= 4.6.0` affected `PowerG - <= 53.02`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.