CVE-2026-14868: Arcinfo Pcvue

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gain privileged access to the PcVue application.

Affected products

• Arcinfo Pcvue: before 17.0.0 (fixed in 17.0.0)

Published 2026-07-07. Last modified 2026-07-09.