Home / Vulnerability Intelligence / CVE-2025-13926

CVE-2025-13926 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 9, 2026

Contemporary Controls BASC 20T - Undefined

Published: April 9, 2026Updated: April 9, 2026Remote Exploitable

Overview

Contemporary Controls BASC 20T contains a vulnerability caused by insufficient protection of network traffic, letting attackers forge packets to make arbitrary requests, exploit requires network traffic sniffing.

Severity & Score

Severity: Critical

CVSS Score: 9.8

Impact

Attackers can forge packets to make arbitrary requests, potentially leading to unauthorized actions or data manipulation.

Mitigation

Update to the latest version or apply vendor recommended patches.

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-099-01.json
https://www.ccontrols.com/support/contacttech.htm
https://www.cisa.gov/news-events/ics-advisories/icsa-26-099-01

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2025-13926
Severity: Critical
CVSS Score: 9.8
Type: undefined
Status: new

CWE

CWE-807

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H