PT-2026-26693 · Automated Logic · Webctrl Premium Server

Published 2026-03-20 · Updated 2026-03-21 · CVE-2026-25086

NVD

CVSS v3.1

7.7

High

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.

Fix

Weakness Enumeration

CWE-605

Related Identifiers

CVE-2026-25086

Affected Products

Webctrl Premium Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25086 · Security Note
• https://automatedlogic.com/en/company/security-commitment · Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-078-08 · Note