CVE Watch8 sept 2026

CVE-2026-81823

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resu

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-862

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.

Referencias oficiales

www.aveva.comhttps://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-839427.8 ALT

—

———Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.5h CVE-2026-839419.9 CRÍ

—

———Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.5h CVE-2026-730147.8 ALT

—

———Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.5h CVE-2026-729665.5 MED

—

———Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.5h CVE-2026-697248.8 ALT

—

———Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.5h CVE-2026-696419.1 CRÍ

—

———Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.5h