CVE-2026-28698: falha crítica em Pronetiqs Panduit Intravue
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.4%
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Produtos afetados
Pronetiqs · Panduit IntravueCVEs relacionadas — Pronetiqs Panduit Intravue
No mesmo produto, das mais perigosas para as menos.
CVE-2026-42933CRITICALUnintended Proxy or Intermediary in Panduit IntraVUE by PronetiqsEPSS 0.5%CVE-2026-40430HIGHPlaintext Storage of a Password in Panduit IntraVUE by PronetiqsEPSS 0.4%CVE-2026-44955MEDIUMExposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by PronetiqsEPSS 0.3%CVE-2026-50044HIGHInadequate Encryption Strength in Panduit IntraVUE by PronetiqsEPSS 0.1%