CVE-2026-1495 — Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

CVE-2026-1495

Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent PUBLISHED

Description (CNA)

The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.

Affected (CNA)

Vendor / product	Versions
AVEVA / PI to CONNECT Agent	affected 0 through Version v2.4.2520

CWE

CWE-532

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.