CVE-2026-1692

MEDIUM

Missing origin validation in GraphicalData web service requests

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-1692 has a selected CVSS score of 5.3 (medium).

Description

A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to lure a successfully authenticated user to a malicious website. This vulnerability only affects the following two endpoints: GraphicalData/js/signalR/connect and GraphicalData/js/signalR/reconnect.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 26, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

PcVue

Browse arcinfo / PcVue

Default status: unaffected

CVE List16.0.0 to ≤ 16.3.3affected
15.0.0 to ≤ 15.2.13affected
12.0.0affected

References

2