PT-2026-27761 · Unknown · Panorama Suite

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-4760

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red

Name of the Vulnerable Software and Affected Versions Panorama Suite versions 2022-SP1 through 2022-SP1 Panorama Suite versions 2023 through 2023 Panorama Suite versions 2025 through 2025 Panorama Suite versions 2025 Updated Dec. 25 through 2025 Updated Dec. 25

Description An attacker can potentially gain read access to specific Web HMI server files if they know the file paths and the files are accessible to the Servin process execution account.

Recommendations Install update PS-2210-02-4079 or higher for Panorama Suite versions 2022-SP1. Install updates PS-2300-03-3078, PS-2300-04-3078, and PS-2300-82-3078 or higher for Panorama Suite versions 2023. Install updates PS-2500-02-1078 and PS-2500-04-1078 or higher for Panorama Suite versions 2025. Install updates PS-2510-02-1077 and PS-2510-04-1077 or higher for Panorama Suite versions 2025 Updated Dec. 25.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2026-4760

Affected Products

Panorama Suite

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-4760 · Security Note
• https://my.codra.net/api/csirt/download?resourceId=1467&fileType=FichierPDF · Note