CVE Watch23 jul 2026

CVE-2026-28698

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerabil

CVSS

8.6

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-497

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

Referencias oficiales

www.cisa.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-449555.3 MED

—

———Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.8h CVE-2026-655354.3 MED

—

——0Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.17h CVE-2026-655215.3 MED

—

——0Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.17h CVE-2026-655055.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.15h CVE-2026-654985.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.15h CVE-2026-654905.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.16h