Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-26 | 2 | Disclosure1General1 |
| 2026-03-12 | 1 | General1 |
🟠 PcVue, Weak Authentication, #CVE-2026-1693 (Medium) https://dailycve.com/pcvue-weak-authentication-cve-2026-1693-medium/
Post summary
The tweet announces CVE-2026-1693, describing it as a weak authentication vulnerability with medium severity, but offers no PoC, exploit, patch, or exploitation details.
CVE-2026-1693 OAuth Credential Theft Vulnerability in PcVue WebVue Features 12.0.0-16.3.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1693
Post summary
The text announces CVE-2026-1693 as an OAuth credential theft vulnerability affecting PcVue WebVue Features 12.0.0-16.3.3, with no further details on exploitation or mitigation.
CVE-2026-1693 The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features o… https://www.cve.org/CVERecord?id=CVE-2026-1693
Post summary
The post notes that CVE-2026-1693 involves the OAuth ROPC flow still being used in certain web services, but provides no further details on exploitation, patches, or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arcinfo | pcvue | - | - | - |