Skip to main content

Panduit IntraVUE CVE-2026-28698

| EUVDEUVD-2026-48449 CRITICAL
Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)
2026-07-23 icscert GHSA-f6pj-m25g-9pq4
Information Disclosure Panduit Intravue
9.2
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
9.2 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.6 HIGH

Remote, unauthenticated, low-complexity filesystem disclosure crossing into the host/share (scope change S:C) with confidentiality-only impact, hence C:H and I/A:N.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Updated
Jul 23, 2026 - 23:28 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 23, 2026 - 23:22 vuln.today
cvss_changed
Severity Changed
Jul 23, 2026 - 23:22 NVD
HIGH CRITICAL
CVSS changed
Jul 23, 2026 - 23:22 NVD
8.6 (HIGH) 9.2 (CRITICAL)
Analysis Generated
Jul 23, 2026 - 22:47 vuln.today
CVE Published
Jul 23, 2026 - 22:04 cve.org
HIGH 8.6

DescriptionCVE.org

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

AnalysisAI

Sensitive information disclosure in Pronetiqs IntraVUE (marketed as Panduit IntraVUE) versions 3.2.1a14 and prior allows remote unauthenticated attackers to read the underlying host and network share filesystem through the industrial-network visualization application. Rated CVSS 4.0 9.2 (Critical) by ICS-CERT, the flaw exposes files outside the application's intended access boundary. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach IntraVUE web interface over network
Delivery
Send crafted request to disclosure endpoint
Exploit
Application reads host/share filesystem
Execution
Retrieve sensitive files and credentials
Impact
Leverage data for OT reconnaissance
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network reachability to the IntraVUE application's exposed interface on a host running version 3.2.1a14 or earlier - per the CVSS vector (AV:N/AC:L/AT:N/PR:N/UI:N) no authentication, no user interaction, and no special attack requirement is needed against a default deployment. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 base score of 9.2 (Critical) reflects a fully remote, low-complexity, unauthenticated vector (AV:N/AC:L/AT:N/PR:N/UI:N) with high confidentiality impact on both the vulnerable and a subsequent system (VC:H, SC:H) and no integrity or availability impact (VI:N/VA:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with network reachability to the IntraVUE server sends crafted requests to the exposed web interface and retrieves files from the underlying host or mounted network shares without needing any credentials. Given AV:N/AC:L/PR:N/UI:N, this requires only connectivity and no user interaction; the attacker could harvest configuration files, stored credentials, or OT topology data. …
Remediation Consult the CISA ICS advisory at https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04 and upgrade to the vendor's fixed release above 3.2.1a14; an exact patched version number is not present in the provided input, so treat 'apply the vendor-supplied update referenced in ICSA-26-204-04' as the primary action rather than an invented version. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: inventory all Panduit IntraVUE installations and isolate internet-facing instances immediately; segment affected systems from untrusted networks and document access logs. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Panduit Intravue

View all
CVE-2026-42933 CRITICAL
10.0 Jul 23

Network-segmentation bypass in Pronetiqs (Panduit) IntraVUE 3.2.1a14 and earlier lets a remote, unauthenticated attacker
CVE-2026-40430 HIGH
8.7 Jul 23

Cleartext credential exposure in Pronetiqs IntraVUE (Panduit IntraVUE) versions 3.2.1a14 and prior allows an attacker to
CVE-2026-50044 HIGH
7.6 Jul 23

Credential theft in Pronetiqs/Panduit IntraVUE (versions 3.2.1a14 and prior) stems from the use of a cryptographically w
CVE-2026-44955 MEDIUM
6.9 Jul 23

Unauthenticated network asset discovery exposure in Pronetiqs IntraVUE (formerly Panduit IntraVUE) versions 3.2.1a14 and

Same weakness CWE-497 – Exposure of Sensitive System Information to an Unauthorized Control Sphere

View all
CVE-2026-34413 HIGH POC
8.8
CVE-2026-41459 MEDIUM POC
6.9
CVE-2022-1902 HIGH POC
8.8
CVE-2022-4985 HIGH POC
8.7
CVE-2018-25358 HIGH POC
8.7
CVE-2020-36922 HIGH POC
7.5
CVE-2020-36926 HIGH POC
7.5
CVE-2024-25634 MEDIUM POC
6.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2026-28698 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy