PT-2026-27761 · Unknown · Panorama Suite

CVE-2026-4760 · Publicado 2026-03-25 · Atualizado 2026-03-25

Positive Technologies (AI Summary)

CVSS v4.0

7.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red

Name of the Vulnerable Software and Affected Versions Panorama Suite versions 2022-SP1 through 2022-SP1 Panorama Suite versions 2023 through 2023 Panorama Suite versions 2025 through 2025 Panorama Suite versions 2025 Updated Dec. 25 through 2025 Updated Dec. 25

Description An attacker can potentially gain read access to specific Web HMI server files if they know the file paths and the files are accessible to the Servin process execution account.

Recommendations Install update PS-2210-02-4079 or higher for Panorama Suite versions 2022-SP1. Install updates PS-2300-03-3078, PS-2300-04-3078, and PS-2300-82-3078 or higher for Panorama Suite versions 2023. Install updates PS-2500-02-1078 and PS-2500-04-1078 or higher for Panorama Suite versions 2025. Install updates PS-2510-02-1077 and PS-2510-04-1077 or higher for Panorama Suite versions 2025 Updated Dec. 25.

Correção

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2026-4760

Produtos afetados

Panorama Suite

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-4760 · Nota de Segurança
• https://my.codra.net/api/csirt/download?resourceId=1467&fileType=FichierPDF · Nota