HTTP Security Header Misconfiguration in PCVue Software
CVE-2026-1696

2.3LOW

Key Information:

Vendor

Arcinfo

Status
Pcvue
Vendor
CVE Published:
26 February 2026

Badges

👾 Exploit Exists

What is CVE-2026-1696?

The vulnerability arises from improper configuration of HTTP security headers by the PCVue web server, which can expose client applications to various security risks. This misconfiguration may allow attackers to bypass certain security measures and exploit client-server communications.

Affected Version(s)

PcVue 16.0.0 <= 16.3.3

PcVue 15.0.0 <= 15.2.13

PcVue 12.0.0

References

https://www.pcvue.com/security/#SB2026-2
vendor-advisory

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.