Inadequate Encryption Vulnerability in Pronetiqs IntraVUE Software
CVE-2026-50044

7.6HIGH

Key Information:

Vendor

Pronetiqs

Status
Panduit Intravue
Vendor
CVE Published:
23 July 2026

What is CVE-2026-50044?

The Pronetiqs IntraVUE software, specifically versions 3.2.1a14 and earlier, is affected by a vulnerability resulting from insufficient encryption strength. This weakness could allow attackers to exploit pass-the-hash techniques, potentially leading to the theft of admin credentials. Users are advised to review their system security and implement necessary updates or patches to mitigate this risk.

Affected Version(s)

Panduit Intravue 0 <= 3.2.1a14

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
government-resource

CVSS V4

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phlebas of Lumintel reported this vulnerability to CISA
.