CVE-2026-27844

Name of the Vulnerable Software and Affected Versions Controller 6000 and Controller 7000 versions prior to vCR9.50.260616a Controller 6000 and Controller 7000 versions prior to vCR9.40.260616a Controller 6000 and Controller 7000 versions prior to vCR9.30.260616a Controller 6000 and Controller 7000 versions prior to vCR9.20.260616a Controller 6000 and Controller 7000 versions 9.10 and prior

Description An uncaught exception in the diagnostic web interface allows an authenticated and authorized operator to trigger a controller restart by sending specific requests. This action results in a temporary denial of service, which is a condition where the system becomes unavailable to its intended users.

Recommendations Update to version vCR9.50.260616a or later. Update to version vCR9.40.260616a or later. Update to version vCR9.30.260616a or later. Update to version vCR9.20.260616a or later. Update to a version newer than 9.10.