CVE-2026-14867

Insecure password storage in User directory PUBLISHED

Description (CNA)

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials. Active Directory accounts are not affected by this vulnerability.

Affected (CNA)

Vendor / product	Versions
arcinfo / PcVue	affected 0 before 17.0.0

CWE

CWE-256

References

https://www.pcvue.com/security/#SB2026-5

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.