CVE-2024-8527: ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-19 · updated 2026-06-17
Weakness: CWE-601

Description

Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.

Affected products

Automated Logic WebCtrl: from 6.0 through 9.0
Carrier i-Vu: from 6.0 through 9.0

References

https://www.corporate.carrier.com/product-security/advisories-resources/

Get alerted when CVE-2024-8527 or the next vulnerability affects your stack