AVEVA PI to CONNECT Agent vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AVEVA PI to CONNECT Agent: 1 record(s), with affected versions and fixes.
CVE-2026-1495
Medium · 6.5
CWE-532 Feb 10, 2026
Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.