CVE-2026-81822

High8.4Published on September 8, 2026

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user.

CVSS score8.4 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Weakness type (CWE)CWE-327

Vulnerabilities

Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions

CISA warns of four AVEVA Pipeline Integrity Monitor flaws enabling data theft, credential recovery and XSS. Update to 2025 SP1 P2 and reset passwords.

Sep 13, 202611:156 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions