CVE-2025-26385: Critical Metasys Command Injection Threatens Building Automation Security
A newly disclosed critical vulnerability in Johnson Controls' widely deployed Metasys building automation platform has sent shockwaves through the operational technology security community, exposing...