What’s Vulnerable › Vulnerabilities

CVE-2026-42933: Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-23 · updated 2026-10-24
• Weakness: CWE-441

Description

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

Affected products

• Pronetiqs Panduit Intravue: through 3.2.1a14

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

Get alerted when CVE-2026-42933 or the next vulnerability affects your stack