Vulnerability · Published Mar 20, 2026 · Assigned by icscert
CVE-2026-25086Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port
High 7.7
In plain English
A high-severity security flaw in WebCTRL Premium Server from Automated Logic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.2%top 94.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Automated Logic | WebCTRL Premium Server | 0 – before v8.5 |
Weakness: CWE-605 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N