What’s Vulnerable › Vulnerabilities

CVE-2026-81823: AVEVA Pipeline Integrity Monitor Missing Authorization

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-08 · updated 2026-09-14
• Weakness: CWE-862

Description

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.

Affected products

• AVEVA Pipeline Integrity Monitor: through Versions 2025 SP1 P1 (build 7.1.9580.8513)

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-253-01.json
• https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01

Get alerted when CVE-2026-81823 or the next vulnerability affects your stack