Multiple Flaws Reported in Automated Logic WebCTRL Premium Server

#cybersecurity #infosec

Summary

Automated Logic patched three vulnerabilities in its WebCTRL Premium Server, including a critical cleartext flaw (CVE-2026-24060), that allow attackers to intercept sensitive data and spoof commands in building automation systems.

Take Action:

If you are using Automated Logic WebCTRL, make sure it's isolated from the internet and your office network. Then plan a patch. Legacy versions 7.x will not be updated so plan an upgrade.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines