PT-2026-26693 · Webctrl · Webctrl

Jonathan Lee + 2 · Publicado 2026-03-20 · Atualizado 2026-03-21 · CVE-2026-25086

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions WebCTRL (affected versions not specified)

Description An attacker may be able to bind to the same port used by WebCTRL. This could allow the attacker to create and send malicious packets, impersonating the WebCTRL service without needing to inject code into the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-605

Identificadores relacionados

CVE-2026-25086

Produtos afetados

Webctrl

Referências · 5

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-25086 · Nota de Segurança
• https://twitter.com/CVEnew/status/2035262109529895213 · Publicação no Twitter
• https://automatedlogic.com/en/company/security-commitment · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-26-078-08 · Nota