CVE-2026-44955

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - ics-cert@hq.dhs.gov

Published

2026-07-23

Last modified

2026-10-24

Weaknesses

CWE-497

Affected products

• Panduit Intravue (Pronetiqs)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04