Back to overview

CVE-2026-50044

MEDIUM
6.8
CVSS 3.1
Description
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

Metadata

CVE ID
CVE-2026-50044
State
PUBLISHED
Assigner
icscert
Reserved
2026-06-15 17:14 UTC
Published
2026-07-23 22:03 UTC
Last updated
2026-07-23 22:03 UTC
Primary CWE
CWE-326
CWE-326 Inadequate Encryption Strength
Vendor / Product
Pronetiqs / Panduit Intravue
Sources
cve.org  ·  NVD

Severity & Metrics

6.8 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products (1)
VendorProductPlatformVersions
Pronetiqs Panduit Intravue — 0 ≤ 3.2.1a14
Weakness (CWE)
CWESourceDescription
CWE-326 cna CWE-326 Inadequate Encryption Strength
CVSS scores (2)
ScoreSeverityVersionSourceVector
7.6 HIGH 4.0 cna CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
6.8 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
References (1)
Back to overview