PT-2026-26693 · Webctrl · Webctrl

Jonathan Lee + 2 · CVE-2026-25086 · Published 2026-03-20 · Updated 2026-03-21

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions WebCTRL (affected versions not specified)

Description An attacker may be able to bind to the same port used by WebCTRL. This could allow the attacker to create and send malicious packets, impersonating the WebCTRL service without needing to inject code into the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-605

Related Identifiers

CVE-2026-25086

Affected Products

Webctrl

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-25086 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json · Note
• https://twitter.com/CVEnew/status/2035262109529895213 · Twitter Post
• https://automatedlogic.com/en/company/security-commitment · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-078-08 · Note