CVE-2020-26867

CriticalCVSS 9.8

Published: 12/10/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.72%

89th percentile - higher than 89% of all known CVEs

Summary

A vulnerability in PcVue prior to version 12.0.17 is caused by the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

Risk Assessment

An attacker could take control of the back-end server, compromising the confidentiality, integrity, and availability of data and systems managed by PcVue.

Recommendation

Immediately upgrade PcVue to version 12.0.17 or later, which includes a fix that eliminates the deserialization vulnerability.

Original NVD description (English source)

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.