Critical vulnerability CVE-2026-3893 affects Carlson Software VASCO-B GNSS Receiver versions below 1.4.0. The device lacks authentication mechanisms, allowing remote attackers with network access to directly modify configuration and operational functions without credentials. This missing authentication for critical functions has a CVSS score of 9.4 (Critical). The vulnerability affects critical manufacturing infrastructure worldwide. Carlson Software recommends updating to version 1.4.0 or greater to address this issue. No known public exploitation has been reported to CISA at this time.