Johnson Controls’ iSTAR Configuration Utility (ICU) tool has a newly disclosed vulnerability — a stack‑based buffer overflow assigned CVE‑2025‑26386 — that can crash the Windows host running the utility and, in certain conditions, enable more severe host‑impact outcomes if exploited. The...
If you had “remotely exploitable stack-based buffer overflow in Johnson Controls ICU” on your 2025 cybersecurity bingo card, congratulations—your predictive powers are unmatched, and perhaps terrifying. For the rest of us mere mortals, now is a prudent time to uncross your fingers and fire up...