CVE-2026-81824

Medium4.7Published on September 8, 2026

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.

CVSS score4.7 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Weakness type (CWE)CWE-79

Vulnerabilities

Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions

CISA warns of four AVEVA Pipeline Integrity Monitor flaws enabling data theft, credential recovery and XSS. Update to 2025 SP1 P2 and reset passwords.

Sep 13, 202611:156 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions