CVE-2025-53695 | Johnson Controls iSTAR Ultra up to 6.9.2 Web Application os command injection

July 28, 2025 Yanac

A vulnerability was found in Johnson Controls iSTAR Ultra up to 6.9.2. It has been classified as critical. Affected is an unknown function of the component Web Application. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2025-53695. It is possible to launch the attack remotely. There is no exploit available.VulDB Recent EntriesRead More