Vulnerability · Published Apr 9, 2026 · Assigned by icscert
CVE-2025-13926Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision
Critical 9.8
In plain English
A critical-severity security flaw in BASControl20 from Contemporary Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 60.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Contemporary Controls | BASControl20 | 3.1 |
Weakness: CWE-807 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H