PT-2026-22126 · Snapvue+5 · Snapvue+6

Publicado 2026-02-26 · Atualizado 2026-03-12 · CVE-2026-1694

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PcVue versions 12.0.0 through 16.3.3

Description The default configuration of IIS and ASP.net adds HTTP headers that are not removed during the deployment of webservices used by the WebVue, WebScheduler, TouchVue, and SnapVue features. This unnecessarily exposes sensitive information about the server configuration.

Recommendations Versions prior to 16.3.3 should ensure HTTP headers are removed during the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue, and SnapVue features.

Correção

Enumeração de Fraquezas

CWE-201

Identificadores relacionados

CVE-2026-1694

Produtos afetados

Asp.Net

Iis

Pcvue

Snapvue

Touchvue

Web Schedule

Webvue

Referências · 8

• https://twitter.com/CVEnew/status/2027004191474901225 · Publicação no Twitter
• https://t.me/CVEtracker/45834 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1694 · Nota de Segurança
• https://t.me/cveNotify/153299 · Publicação no Telegram
• https://t.me/cveNotify/155270 · Publicação no Telegram
• https://pcvue.com/security/#SB2026-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-1694 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2027049773660791032 · Publicação no Twitter