Skip to content
OpenAdvisories

Product · Automated Logic

WebCTRL Premium Server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-32666

    Automated Logic WebCTRL Premium Server Authentication Bypass by Spoofing

    WebCTRL systems that communicate over BACnet inherit the protocol's lack of network layer authentication. WebCTRL does not implement additional validation of BACnet traffic so an attacker with network access could spoof BACnet packets directed at either the W…

    Automated Logic WebCTRL Premium Server
  • High 7.7
    CVE-2026-25086

    Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port

    Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software.

    Automated Logic WebCTRL Premium Server