VULNERABILITY INTELLIGENCE
CVE-2026-25086
CVSS score7.7 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-03-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-605
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-605