Information Disclosure Vulnerability in PMWeb by PMWeb, Inc.
CVE-2026-101083

6.9MEDIUM

Key Information:

Vendor

PMWeb, Inc.

Status
Pmweb
Vendor
CVE Published:
28 September 2026

What is CVE-2026-101083?

A significant security vulnerability has been identified in the PMWeb applications (versions 7.x, 8.x, and 2025.x) relating to the encryptionhelper.dll library. This flaw allows for remote attackers to manipulate the library, potentially leading to unauthorized access and disclosure of sensitive information. Despite being alerted about the issue, PMWeb has not responded, which raises concerns about the product's security response and the need for users to implement protective measures.

Affected Version(s)

PMWeb v7.*

PMWeb v8.*

PMWeb v2025.*

References

https://vuldb.com/vuln/410955
vdb-entry
https://vuldb.com/vuln/410955/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101083
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

aljaber (VulDB User)
aljaber (VulDB User)
VulDB CNA Team
.