CVE-2026-81823

Deferred Deferred - Pending Action

Unauthenticated Information Disclosure in PIMBoards

Publication date: 2026-09-08

Last updated on: 2026-09-14

Assigner: ICS-CERT

Description

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-81823

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated attacker to read information that should only be accessible to PIMBoards users. It specifically impacts read operations while leaving write operations unaffected.

Impact Analysis

An attacker could access sensitive data intended for PIMBoards users, leading to potential data leaks or unauthorized information disclosure. This could affect confidentiality of stored information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized data access. GDPR requires protection against unauthorized access, while HIPAA mandates safeguards for protected health information.

Mitigation Strategies

Implement network segmentation to restrict access to PIMBoards users only. Review and enforce strict authentication controls for any read operations. Monitor logs for unauthorized access attempts or unusual read activity.

Hi! I’m here to help you understand CVE-2026-81823. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70