PT-2026-22129 · Schneider Electric · Pcvue

Published 2026-02-26 · Updated 2026-03-12 · CVE-2026-1697

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PcVue versions 12.0.0 through 16.3.3

Description The Secure and SameSite attributes are missing in the GraphicalData web services and WebClient web app. This could potentially allow for certain attacks related to cookie handling.

Recommendations Update to a version later than 16.3.3.

Fix

Weakness Enumeration

CWE-1275

CWE-614

Related Identifiers

CVE-2026-1697

Affected Products

Pcvue

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-1697 · Security Note
• https://pcvue.com/security/#SB2026-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-1697 · Vendor Advisory
• https://t.me/cveNotify/155287 · Telegram Post
• https://twitter.com/dailycve/status/2032177003701436484 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2027036974138138768 · Twitter Post
• https://t.me/CVEtracker/45837 · Telegram Post
• https://twitter.com/CVEnew/status/2027004188496978059 · Twitter Post