Vulnerability in Arcinfo Pcvue
CVE-2026-1693
The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being depreca…
EPSS: 0.003 (23.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Arcinfo Pcvue — versions 16.0.0, 15.0.0, 12.0.0
- Arcinformatique Pcvue
Weakness classification (CWE)
References
- 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-1693?
- CVE-2026-1693 is a high-severity vulnerability in Arcinfo Pcvue, classified under CWE-477. CVSS score: 7.5/10. Published 2026-02-26.
- How severe is CVE-2026-1693?
- High severity. CVSS v3 base score is 7.5 out of 10.