CVE-2026-28698
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthorized entities, potentially revealing host/share files.
Risk Assessment
An attacker can access sensitive system data and files, potentially leading to further attacks and confidentiality breaches.
Recommendation
Update IntraVUE to the latest version and restrict network access to the system.
Other vulnerabilities in Pronetiqs IntraVUE
See all- CVE-2026-42933Critical
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, bypassing OT segmentation.
- CVE-2026-50044Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability that could allow an attacker to steal admin credentials via weak hash or pass-the-hash attack.
- CVE-2026-44955Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthenticated users, allowing asset discovery.
- CVE-2026-40430High
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.
Original NVD description (English source)
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.