Johnson Controls iSTAR Ultra, iSTAR Ultra SE

• CVE-2025-43876 High 8.7 iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettings 0.3%
• CVE-2025-43875 High 8.7 iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo 0.3%