CVE-2026-25086

Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port

CVSS 7.7 HIGHEPSS 0.2%CWE-605

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 mar 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

Automated Logic · WebCTRL Premium Server

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json https://www.automatedlogic.com/en/company/security-commitment/https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08