CVE-2026-1697 | THREATINT

Description

The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.

PUBLISHED Reserved 2026-01-30 | Published 2026-02-26 | Updated 2026-02-26 | Assigner arcinfo

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Clear

Problem types

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1275 Sensitive Cookie with Improper SameSite Attribute

Product status

Default status

unaffected

16.0.0 (cpe)

affected

15.0.0 (cpe)

affected

12.0.0 (cpe)

affected

References

www.pcvue.com/security/ vendor-advisory

cve.org (CVE-2026-1697)

nvd.nist.gov (CVE-2026-1697)

Download JSON