CVE-2025-26379: Johnson Controls Iq PANELS2, 2+, Iqhub, Iqpanel 4, Powerg

High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Affected products

• Johnson Controls Iq PANELS2, 2+, Iqhub, Iqpanel 4, Powerg

Published 2025-12-22. Last modified 2026-06-17.