CVE-2026-1495CWE-532

Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

Medium · published February 10, 2026

CVSS v4.0
5.7
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:L
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-02-10T20:18Z
EPSS history
Timeline
  • 10 FEB 20:18Z
    Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
    cvelistv5