What’s Vulnerable › Vulnerabilities

CVE-2026-44955: Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-23 · updated 2026-10-24
• Weakness: CWE-497

Description

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

Affected products

• Pronetiqs Panduit Intravue: through 3.2.1a14

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

Get alerted when CVE-2026-44955 or the next vulnerability affects your stack