{"id":"CVE-2026-25086","aliases":["EUVD-2026-13844","GHSA-4p22-4q7x-9xpq"],"status":"published","title":"Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port","description":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could allow the attacker to craft and send malicious \npackets and impersonate the WebCTRL service without requiring code \ninjection into the WebCTRL software.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00161,"percentile":0.05341,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-605"],"published":"2026-03-20T23:14:23Z","modified":"2026-06-17T10:24:05Z","products":[{"vendor":"automated logic","product":"webctrl premium server"}],"references":[{"url":"https://www.automatedlogic.com/en/company/security-commitment/"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25086"},{"url":"https://www.automatedlogic.com/en/company/security-commitment"},{"url":"https://github.com/advisories/GHSA-4p22-4q7x-9xpq"}],"sources":{"cve":[{"id":"CVE-2026-25086","title":"Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port","description":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could allow the attacker to craft and send malicious \npackets and impersonate the WebCTRL service without requiring code \ninjection into the WebCTRL software.","status":"published","published":"2026-03-20T23:14:23.075Z","modified":"2026-03-23T15:56:09.72Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-605","CWE-605"],"updated_at":"2026-11-02T13:41:30.911526Z"}],"euvd":[{"id":"EUVD-2026-13844","description":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could allow the attacker to craft and send malicious \npackets and impersonate the WebCTRL service without requiring code \ninjection into the WebCTRL software.","status":"published","published":"2026-03-20T23:14:23Z","modified":"2026-03-23T15:56:09Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:25:31.168902Z"}],"ghsa":[{"id":"GHSA-4p22-4q7x-9xpq","title":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could...","description":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could allow the attacker to craft and send malicious \npackets and impersonate the WebCTRL service without requiring code \ninjection into the WebCTRL software.","status":"published","published":"2026-03-21T00:31:44Z","modified":"2026-03-21T00:31:51Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-605"],"updated_at":"2026-11-02T15:06:44.698439Z"}],"nvd":[{"id":"CVE-2026-25086","description":"Under certain conditions, an attacker could bind to the same port used \nby WebCTRL. This could allow the attacker to craft and send malicious \npackets and impersonate the WebCTRL service without requiring code \ninjection into the WebCTRL software.","status":"published","published":"2026-03-21T00:16:25.683Z","modified":"2026-06-17T10:24:05.86Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-605"],"updated_at":"2026-11-02T14:12:10.126802Z"}]}}