CVE-2026-14867: Arcinfo Pcvue

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials.  Active Directory accounts are not affected by this vulnerability.

Affected products

• Arcinfo Pcvue: before 17.0.0 (fixed in 17.0.0)

Published 2026-07-07. Last modified 2026-07-09.