CVE-2026-1507

The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service.

Score

CVSS 4.0 8.7 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2026-02-10

Last modified

2026-02-12

Weaknesses

CWE-248

Affected products

• Pi Data Archive Pi Server (Aveva)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-03