Carrier vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20257
3. 20261

Newest CVEs

• CVE-2025-14295

  Automated Logic WebCTRL and Carrier i-Vu Session Fixation

  Automated Logic · WebCTRL

  High7.0
• CVE-2024-5540

  ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

  Automated Logic · WebCTRL

  Medium6.9
• CVE-2024-5539

  ALC WebCTRL Carrier i-Vu Access Control Bypass

  Automated Logic · WebCTRL

  Critical9.2
• CVE-2025-0657

  ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

  Automated Logic · WebCtrl

  High8.8
• CVE-2025-0658

  Automated Logic and Carrier Zone Controllers malformed packets denial of service

  Automated Logic · Zone Controllers

  High8.7
• CVE-2024-8528

  ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

  Automated Logic · WebCtrl

  Medium5.4
• CVE-2024-8527

  ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

  Automated Logic · WebCtrl

  High8.6
• CVE-2024-10930

  Carrier Block Load Privilege Escalation

  Carrier · Block Load

  High7.1
• CVE-2024-8525

  Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

  Automated Logic, a Carrier company · WebCTRL

  Critical10.0
• CVE-2024-8526

  Automated Logic WebCTRL and Carrier i-Vu Open Redirect

  Automated Logic, a Carrier company · WebCTRL

  Medium5.9