Automated Logic vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20256
3. 20264

Newest CVEs

• CVE-2026-24060

  Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information

  Automated Logic · WebCTRL Premium Server

  Critical9.1
• CVE-2026-32666

  Automated Logic WebCTRL Premium Server Authentication Bypass by Spoofing

  Automated Logic · WebCTRL Premium Server

  High7.5
• CVE-2026-25086

  Automated Logic WebCTRL Premium Server Multiple Binds to the Same Port

  Automated Logic · WebCTRL Premium Server

  High7.7
• CVE-2025-14295

  Automated Logic WebCTRL and Carrier i-Vu Session Fixation

  Automated Logic · WebCTRL

  High7.0
• CVE-2024-5540

  ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

  Automated Logic · WebCTRL

  Medium6.9
• CVE-2024-5539

  ALC WebCTRL Carrier i-Vu Access Control Bypass

  Automated Logic · WebCTRL

  Critical9.2
• CVE-2025-0657

  ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

  Automated Logic · WebCtrl

  High8.8
• CVE-2025-0658

  Automated Logic and Carrier Zone Controllers malformed packets denial of service

  Automated Logic · Zone Controllers

  High8.7
• CVE-2024-8528

  ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

  Automated Logic · WebCtrl

  Medium5.4
• CVE-2024-8527

  ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

  Automated Logic · WebCtrl

  High8.6