Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-1698

HTTP Host header vulnerability in WebClient and WebScheduler web apps

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
arcinfo

Description

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

arcinfo PcVue

Default version status: unaffected

  • 16.0.0 to ≤ 16.3.3affected
  • 15.0.0 to ≤ 15.2.13affected

References