CVE-2026-14868

Katalog CVE

CVSS 5.5 · Medium EPSS 0,06%

Kerentanan Inadequate Encryption Strength pada arcinfo pcvue. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gain privileged access to the PcVue application.

Rincian

Terbit di NVD

7 Juli 2026

Terakhir diubah

9 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-326: Inadequate Encryption Strength

EPSS (30 hari)

0,06% peluang dieksploitasi; lebih tinggi dari 0,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.pcvue.com/security/#SB2026-5 advisory vendor