Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 22, 2025 · NIST NVD

   Detected

   Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

2. Oct 14, 2026 · NIST NVD

   Updated

   Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Sources

• CVE.orgVulnerability recordCVE-2025-26379

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-26379

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2025-26379

  Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

  nvd.nist.gov

References

• Reference · cisa.gov
• Reference · johnsoncontrols.com