{"id":"CVE-2025-26379","title":"Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.","summary":"Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.","severity":"none","cwe":["CWE-338"],"published":"2025-12-22","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:10:00.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-26379","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02","label":"productsecurity@jci.com"},{"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","label":"productsecurity@jci.com"}],"tags":["nvd"],"epss":0.00186,"epssPercentile":0.07688,"ingestedAt":"2026-10-14T19:49:57.536Z","slug":"CVE-2025-26379","body":"## Overview\n\nUse of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}