Critical severity9.4NVD Advisory· Published Apr 28, 2026· Updated Jun 16, 2026

CVE-2026-3893

Description

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Carlson/VASCO-B GNSS Receiverllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-02.jsonnvd
www.carlsonsw.com/support-and-training/nvd
www.cve.org/CVERecordnvd

News mentions

Carlson Software VASCO-B GNSS Receiver
CISA Alerts

cvss	0.611
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000