CVE-2026-1693

CVE-2026-1693CVE-2026-1693

arcinfo / pcvue

Description

The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Last modified2026-07-09
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.