Automated Logic

Products

ProductCVEsExploitedLatest
WebCTRL6–Jan 22, 2026
WebCTRL Premium Server3–Mar 20, 2026
Gen5 Controllers1–Nov 27, 2025
WebCtrl Server1–Apr 19, 2022
Zone Controllers1–Nov 27, 2025

Exploited and recent CVEs

  • CVE-2026-24060 Critical 9.1 Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information 0.2%
  • CVE-2026-32666 High 7.5 Automated Logic WebCTRL Premium Server Authentication Bypass by Spoofing 0.3%
  • CVE-2026-25086 High 7.7 Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port 0.2%
  • CVE-2025-14295 High 7.0 Automated Logic WebCTRL and Carrier i-Vu Session Fixation 0.2%
  • CVE-2024-5540 Medium 6.9 ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting 0.3%
  • CVE-2024-5539 Critical 9.2 ALC WebCTRL Carrier i-Vu Access Control Bypass 0.4%
  • CVE-2025-0657 High 8.8 ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range 0.4%
  • CVE-2025-0657 High 8.8 ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range 0.4%
  • CVE-2025-0658 High 8.7 Automated Logic and Carrier Zone Controllers malformed packets denial of service 0.4%
  • CVE-2024-8528 Medium 5.4 ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter 0.1%
  • CVE-2024-8527 High 8.6 ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter 0.2%
  • CVE-2022-1019 Medium 5.2 Automated Logic WebCtrl Server Open Redirection Vulnerability 0.7%