CVE-2026-14867
Received Received - Intake

Insecure Credential Storage in PcVue User Directory

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: arcinfo

Description
Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials.  Active Directory accounts are not affected by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-07
Last Modified
2026-07-07
Generated
2026-07-07
AI Q&A
2026-07-07
EPSS Evaluated
N/A
NVD
CVE-2026-14867
EUVD
EUVD-2026-42031

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pcvue pcvue to 17.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-256 The product stores a password in plaintext within resources such as memory or files.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves insecure storage of credentials for built-in users within the User directory of PcVue projects in all versions prior to 17.0.0.

A local attacker with access to the system could retrieve these stored user credentials.

It is important to note that Active Directory accounts are not affected by this vulnerability.

Impact Analysis

If exploited, this vulnerability could allow a local attacker to obtain credentials of built-in users, potentially leading to unauthorized access to the PcVue project environment.

Such unauthorized access could compromise the confidentiality and integrity of the system and its data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14867. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart