CVE-2025-13926CWE-807

CVE-2025-13926

Critical · published April 10, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

An attacker could use data obtained by sniffing the network traffic to

forge packets in order to make arbitrary requests to Contemporary

Controls BASC 20T.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2026-04-10T00:16Z
References (3)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-099-01.json · [email protected]https://www.ccontrols.com/support/contacttech.htm · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-099-01 · [email protected]
EPSS history
Timeline
  • 09 APR 19:47Z
    Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision
    cvelistv5