PT-2026-5305 · Br Automation · B&R Pvi Client

Published 2026-01-29 · Updated 2026-05-06 · CVE-2026-0936

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions B&R PVI client versions prior to 6.5

Description An issue exists in B&R PVI client where an authenticated local attacker may be able to gather credential information. This occurs through the insertion of sensitive information into log files. The logging function is disabled by default and requires explicit user enablement.

Recommendations Update B&R PVI client to version 6.5 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-0936

Affected Products

B&R Pvi Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0936 · Security Note
• https://twitter.com/aviatrixtrc/status/2052072418789785644 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016924570557563343 · Twitter Post
• https://br-automation.com/fileadmin/SA26P001-2862434c.pdf · Note
• https://t.me/CVEtracker/43253 · Telegram Post