CVE-2026-1697

5.3 mediumEPSS 0.1%

Medium (5.3) in arcinfo pcvue. EPSS 0.1% chance of exploitation in the next 30 days.

The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Clear

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWEs: CWE-614, CWE-1275
Published: 2026-02-26
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

arcinfo:pcvue

References

https://www.pcvue.com/security/#SB2026-2

Check your stack JSON