CVE-2026-40430
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.
Risk Assessment
Risk of credential leakage, potentially enabling unauthorized access to the system.
Recommendation
Update Pronetiqs IntraVUE to a version later than 3.2.1a14. Avoid storing passwords in plaintext.
Other vulnerabilities in Pronetiqs IntraVUE
See all- CVE-2026-42933Critical
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, bypassing OT segmentation.
- CVE-2026-50044Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability that could allow an attacker to steal admin credentials via weak hash or pass-the-hash attack.
- CVE-2026-44955Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthenticated users, allowing asset discovery.
- CVE-2026-28698High
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthorized entities, potentially revealing host/share files.
Original NVD description (English source)
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.