🔐 CVE Alert

CVE-2025-53700

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑15 File Manipulation. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.

Vendor johnson controls
Product istar ultra
Published Nov 13, 2026
Stay Ahead of the Next One

Get instant alerts for johnson controls istar ultra

Be the first to know when new unknown vulnerabilities affecting johnson controls istar ultra are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Johnson Controls / iSTAR Ultra
0 < 6.9.2.CU02
Johnson Controls / iSTAR Ultra SE
0 < 6.9.2.CU02
Johnson Controls / iSTAR Ultra G2
0 < 6.9.2.CU02
Johnson Controls / iSTAR Ultra G2 SE
0 < 6.9.2.CU02
Johnson Controls / iSTAR Edge G2
0 < 6.9.2.CU02

References

NVD ↗ CVE.org ↗ EPSS Data ↗
johnsoncontrols.com: https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories