Skip to content
OpenAdvisories
High · 8.4 CVE-2026-14868 EUVD-2026-42032GHSA-3wmf-whvw-c22m

Weak encryption mechanism for User directory

Published Jul 7, 2026 · Updated Jul 7, 2026 · Assigned by arcinfo

Description

The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gain privileged access to the PcVue application.

Affected products

VendorProductAffectedFixed
arcinfo PcVue < 17.0.0 17.0.0

References