CVE-2026-50044 Inadequate Encryption Strength in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack...

CVE-2026-44955 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users...

CVE-2026-44955

CVE-2026-44955 affects Pronetiqs IntraVUE, version 3.2.1a14 and earlier. The issue is an exposure of sensitive system information to an unauthorized control sphere, enabling asset discovery by unauthenticated users. Documented impact is limited to information disclosure with no indicated changes ...

CVE-2026-42933

The CVE-2026-42933 affects Pronetiqs IntraVUE up to version 3.2.1a14, where an unintended proxy/intermediary could let an attacker act as an active proxy, bypassing OT segmentation. According to the connected records, this is a network‑level vulnerability with high/critical impact (CVE-2026-42933...

CVE-2026-40430 Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API...

Panduit IntraVUE

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. 2. RECOMMENDED PRACTICES CISA recommends users...