Unauthorized Access to Proxy Details in Event Log by PI Product
CVE-2026-1495

5.7MEDIUM

Key Information:

Vendor

Aveva

Status
Pi To Connect Agent
Vendor
CVE Published:
10 February 2026

What is CVE-2026-1495?

A vulnerability exists in the PI product that allows users with Event Log Reader privileges to exploit the system. An attacker could potentially gain access to sensitive proxy details, including URLs and proxy credentials, from the event log files. This unauthorized access may lead to compromised security of the proxy server, highlighting the need for enhanced access controls and security measures.

Affected Version(s)

PI to CONNECT Agent 0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
government-resource

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.