VULNERABILITY INTELLIGENCE

CVE-2026-1694

CVSS score4.3 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-02-26
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.

Weakness classification

  • 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932: CWE-201

Primary references