Skip to content

CVE-2025-26385

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
February 1, 2026
Last Seen
February 1, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CISA issued a critical alert regarding a severe SQL injection vulnerability affecting multiple Johnson Controls industrial control system products. The vulnerability, tracked as CVE-2025-26385, has a maximum CVSS v3 severity score of 10.0, indicating the highest level of risk. It arises from imprope...

Public Exploits

Checking GitHub for proof-of-concept code…