CVE-2026-1697

MEDIUM

Use of unsecure cookies for GraphicalData web service and WebClient web app

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-1697 has a selected CVSS score of 5.3 (medium).

Description

The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 26, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

PcVue

Browse arcinfo / PcVue

Default status: unaffected

CVE List16.0.0 to ≤ 16.3.3affected
15.0.0 to ≤ 15.2.13affected
12.0.0affected

References

2