XSS in Arcinfo Pcvue
CVE-2026-1695
An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to trick a legitimate user into loadin…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.001 (17.0th percentile) — read the EPSS interpretation.
Affected products
- Arcinfo Pcvue — versions 16.0.0, 15.0.0, 12.0.0
Weakness classification (CWE)
References
- www.pcvue.com/security/ (vendor-advisory)