Sensitive Information Leakage in PIMBoards by AVEVA
CVE-2026-81821

8.3HIGH

Key Information:

Vendor

Aveva

Status
Pipeline Integrity Monitor
Vendor
CVE Published:
8 September 2026

What is CVE-2026-81821?

The vulnerability allows unauthorized individuals with read access to PIMBoards project files to decrypt and access sensitive information, potentially compromising the confidentiality of critical data. Organizations using PIMBoards should implement security measures to mitigate the risk of exploitation.

Affected Version(s)

Pipeline Integrity Monitor 0

References

https://www.aveva.com/content/dam/aveva/documents/support...
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Self-discovered and self-reported in accordance with AVEVA’s Ethical Disclosure Policy to inform administrators of potential risks, so that they can take actions to minimize the effects of the vulnerabilities.
.