PT-2026-22126 · Snapvue+5 · Snapvue+6

Published 2026-02-26 · Updated 2026-03-12 · CVE-2026-1694

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PcVue versions 12.0.0 through 16.3.3

Description The default configuration of IIS and ASP.net adds HTTP headers that are not removed during the deployment of webservices used by the WebVue, WebScheduler, TouchVue, and SnapVue features. This unnecessarily exposes sensitive information about the server configuration.

Recommendations Versions prior to 16.3.3 should ensure HTTP headers are removed during the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue, and SnapVue features.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-1694

Affected Products

Asp.Net

Iis

Pcvue

Snapvue

Touchvue

Web Schedule

Webvue

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-1694 · Security Note
• https://pcvue.com/security/#SB2026-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-1694 · Vendor Advisory
• https://twitter.com/CVEnew/status/2027004191474901225 · Twitter Post
• https://t.me/CVEtracker/45834 · Telegram Post
• https://t.me/cveNotify/153299 · Telegram Post
• https://t.me/cveNotify/155270 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2027049773660791032 · Twitter Post