Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-26 | 2 | Disclosure2 |
| 2026-03-12 | 1 | Disclosure1 |
🟠 PcVue, Host Header Injection, #CVE-2026-1698 (Medium) https://dailycve.com/pcvue-host-header-injection-cve-2026-1698-medium/
Post summary
A new host header injection vulnerability (CVE‑2026‑1698) in PcVue has been disclosed with a medium severity rating, but no PoC, exploit, or patch information is provided.
CVE-2026-1698 HTTP Host Header Injection in PcVue WebClient and WebScheduler Applications https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1698
Post summary
A new HTTP Host Header Injection vulnerability (CVE-2026-1698) affecting PcVue WebClient and WebScheduler applications has been disclosed.
CVE-2026-1698 A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker t… https://www.cve.org/CVERecord?id=CVE-2026-1698
Post summary
The text announces CVE-2026-1698, a Host header attack affecting PcVue WebClient and WebScheduler, but provides no evidence of exploitation or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arcinfo | pcvue | - | - | - |