CVE-2026-25086

—

CVSS 3.1

7.7 high

EPSS

<1%p5

Published

Mar 21, 2026 (Mar 21, 2026)

Modified

Jun 17, 2026

Description

Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.

Weakness: CWE-605
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.