What is CVE-2026-42933?

CVE-2026-42933 is a critical-severity vulnerability in Pronetiqs Panduit Intravue, classified under Unintended Proxy or Intermediary (Confused Deputy). CVSS score: 10.0/10. Published 2026-07-23.

How severe is CVE-2026-42933?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Pronetiqs Panduit Intravue

CVE-2026-42933

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Pronetiqs Panduit Intravue — versions 0

Weakness classification (CWE)

CWE-441 — Unintended Proxy or Intermediary (Confused Deputy)

References

ics-cert@hq.dhs.gov (government-resource)

Frequently asked questions

What is CVE-2026-42933?: CVE-2026-42933 is a critical-severity vulnerability in Pronetiqs Panduit Intravue, classified under Unintended Proxy or Intermediary (Confused Deputy). CVSS score: 10.0/10. Published 2026-07-23.
How severe is CVE-2026-42933?: Critical severity. CVSS v3 base score is 10.0 out of 10.