Vulnerability in Arcinfo Pcvue
CVE-2026-1692
A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote atta…
EPSS: 0.001 (1.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Arcinfo Pcvue — versions 16.0.0, 15.0.0, 12.0.0
- Arcinformatique Pcvue
Weakness classification (CWE)
References
- 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-1692?
- CVE-2026-1692 is a medium-severity vulnerability in Arcinfo Pcvue, classified under CWE-1385. CVSS score: 6.1/10. Published 2026-02-26.
- How severe is CVE-2026-1692?
- Medium severity. CVSS v3 base score is 6.1 out of 10.