Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-81824 EUVD-2026-73928GHSA-9hrx-9m98-rh8r

AVEVA Pipeline Integrity Monitor cross-site scripting

Published Sep 8, 2026 · Updated Sep 11, 2026 · Assigned by icscert

Description

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.

Affected products

VendorProductAffectedFixed
AVEVA Pipeline Integrity Monitor ≤ Versions 2025 SP1 P1 (build 7.1.9580.8513) —

Advisories 1

References