Skip to content
OpenAdvisories
Critical ICSA-26-204-04 5 CVEs

Panduit IntraVUE

Published Jul 23, 2026 · Updated Jul 23, 2026

Vendor: Pronetiqs Product: IntraVUE

Summary

Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling.

Vulnerabilities 5

  • Critical 10.0
    CVE-2026-42933

    Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs

    Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

    Pronetiqs Panduit Intravue
  • High 8.6
    CVE-2026-28698

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

    Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

    Pronetiqs Panduit Intravue
  • High 7.5
    CVE-2026-40430

    Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs

    Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.

    Pronetiqs Panduit Intravue
  • Medium 6.8
    CVE-2026-50044

    Inadequate Encryption Strength in Panduit IntraVUE by Pronetiqs

    Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

    Pronetiqs Panduit Intravue
  • Medium 5.3
    CVE-2026-44955

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

    Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

    Pronetiqs Panduit Intravue

Revision history

  1. #1

    Initial Publication

References