gnss security

  1. CISA Urges Patch for Carlson VASCO-B GNSS Auth Flaw (CWE-306, CVSS 9.4)

    Critical infrastructure operators are being urged to patch Carlson Software’s VASCO-B GNSS Receiver after CISA published a new ICS advisory describing a high-severity authentication flaw that could let a remote attacker change device configuration or interfere with operation. The advisory says...
  2. CISA Warns: Carlson VASCO-B GNSS Missing Authentication CVE-2026-3893

    The Carlson Software VASCO-B GNSS Receiver has landed in the spotlight because CISA says a remotely reachable authentication flaw could let an attacker alter critical functions or disrupt operation. The affected range is VASCO-B GNSS Receiver versions before 1.4.0, tracked as CVE-2026-3893, and...