← Back

CVE-2026-1694

nvd nist
Published: Feb 26, 2026Modified: Jul 9, 2026

JSON object

Loading...
2.3
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear
Show more
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:ClearShow less
Source: 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932 (Secondary)

Description

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.

Affected (2)

Products: Arcinfo: Pcvue
Arcinfo
1 product
Pcvue
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Arcinfo
Pcvue
From 12.0.0 to 15.2.13
Pcvue
From 16.0.0 to 16.3.4

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

Source: 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932
Vendor Advisory

Timeline

No history available yet.