CVEvulnerability

CVE-2026-25086

7.7 HIGH Published 2026-03-21 Modified 2026-06-17 Official page ↗

Status: Awaiting Analysis
Published: 2026-03-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.7 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses: CWE-605

Description

Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.

Weakness · CWE (1)

CWE-605 Multiple Binds to the Same Port weakness

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json github.com
https://www.automatedlogic.com/en/company/security-commitment/ www.automatedlogic.com
https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08 www.cisa.gov

CVE-2026-25086

Description

Related

Weakness · CWE (1)

References