Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-14867 EUVD-2026-42031GHSA-63cg-fqr3-853j

Insecure password storage in User directory

Published Jul 7, 2026 · Updated Jul 7, 2026 · Assigned by arcinfo

Description

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials. 

Active Directory accounts are not affected by this vulnerability.

Affected products

VendorProductAffectedFixed
arcinfo PcVue < 17.0.0 17.0.0

References