CVE-2025-26379

HighCVSS 7.2

Published: 22/12/2025(UTC)Updated: 14/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The vulnerability involves the use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Risk Assessment

An attacker could intercept or modify PowerG communication, potentially leading to breaches of confidentiality and integrity of data in building automation systems.

Recommendation

Update software or devices using PowerG to a version with a stronger random number generator and implement additional encryption and authentication mechanisms.

Other vulnerabilities in PowerG

CVE-2025-61738Low
Under certain circumstances, an attacker can capture the network key and read or write encrypted packets on the PowerG network.

Original NVD description (English source)

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS