Skip to content
OpenAdvisories
Medium ICSA-26-041-04 1 CVE

AVEVA PI to CONNECT Agent

Published Feb 10, 2026 · Updated Feb 10, 2026

Vendor: AVEVA Product: PI to CONNECT Agent

Summary

Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server.

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-1495

    Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

    The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy s…

    AVEVA PI to CONNECT Agent

Revision history

  1. #1

    Initial Republication of AVEVA-2026-003

References