Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-3893 EUVD-2026-26081GHSA-fc84-9gcf-p72v

Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

Published Apr 28, 2026 · Updated Apr 29, 2026 · Assigned by icscert

Description

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism,
allowing an attacker with network access to directly access and modify
its configuration and operational functions without needing credentials.

Affected products

VendorProductAffectedFixed
Carlson Software VASCO-B GNSS Receiver < 1.4.0 1.4.0

Advisories 1

References