Information Disclosure Vulnerability in AVEVA PIMBoards Products
CVE-2026-81823

6.9MEDIUM

Key Information:

Vendor

Aveva

Status
Pipeline Integrity Monitor
Vendor
CVE Published:
8 September 2026

What is CVE-2026-81823?

An information disclosure vulnerability exists within AVEVA's PIMBoards that, if exploited, permits an unauthenticated user to access sensitive read operations meant solely for legitimate PIMBoards users. This could lead to unauthorized exposure of confidential information, while the integrity of write operations remains intact. It is crucial for users and administrators to implement proper security measures to mitigate the risk posed by this vulnerability.

Affected Version(s)

Pipeline Integrity Monitor 0

References

https://www.aveva.com/content/dam/aveva/documents/support...
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adham Khairy Ramadan discovered and reported this vulnerability to AVEVA through a private HackerOne bug bounty program.
.