CVE-2025-13926 – Contemporary Controls BASControl20

This patch addresses a critical vulnerability in Contemporary Controls BASControl20 devices that could allow an attacker to gain unauthorized control over the system. The issue poses a severe risk to building automation environments, where these controllers are often deployed to manage HVAC and other infrastructure systems.

CVE-2025-13926 has a CVSS score of 9.8, which is Critical severity. This level of severity indicates that the vulnerability can be exploited remotely with little to no user interaction, potentially leading to full system compromise. No verified exploitation or proof-of-concept activity has been confirmed at this time.