VULNERABILITY INTELLIGENCE
CVE-2020-26867
CVSS score9.8 CRITICAL
EPSS probability3.75%
CISA KEVNot currently listed
Published2020-10-12
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
Weakness classification
- vulnerability@kaspersky.com: CWE-502
- nvd@nist.gov: CWE-502
Primary references
- vulnerability@kaspersky.com — Broken Link
- vulnerability@kaspersky.com — Third Party Advisory, US Government Resource
- vulnerability@kaspersky.com — Third Party Advisory, US Government Resource
- vulnerability@kaspersky.com — Third Party Advisory, US Government Resource
- vulnerability@kaspersky.com — Third Party Advisory, US Government Resource
- vulnerability@kaspersky.com — Vendor Advisory
- vulnerability@kaspersky.com — Permissions Required, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource