CVE-2025-13926 - Vulnerability Analysis

Overview

Contemporary Controls BASC 20T contains a vulnerability caused by insufficient protection of network traffic, letting attackers forge packets to make arbitrary requests, exploit requires network traffic sniffing.

Severity & Score

Impact

Attackers can forge packets to make arbitrary requests, potentially leading to unauthorized actions or data manipulation.

Mitigation

Update to the latest version or apply vendor recommended patches.

References

• https://www.ccontrols.com/support/contacttech.htm
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-099-01
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-099-01.json

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 12, 2026

🔴 CVE-2025-13926 - Critical (9.8) An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13926/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner