CVE-2026-44955

MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Title source: cna

Description

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

References (1)

Core 1

Core References

Government Resource government-resource

https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

Scores

CVSS v3 5.3

EPSS 0.0021

EPSS Percentile 10.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-497

Status published

Products (1)

Pronetiqs/Panduit Intravue < 3.2.1a14

Published Jul 23, 2026

Tracked Since Jul 24, 2026