CVE-2026-1507CWE-248

Uncaught Exception vulnerability in AVEVA PI Data Archive

High · published February 10, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

⚡ An uncaught exception is all it takes to send core PI services crashing down! This vulnerability lets an unauthenticated attacker trigger a denial-of-service like pulling the plug on a live concert. 🎤 Think of it like a juggler who drops all their balls because someone sneakily yanked away the stage light — the show stops instantly. This vulnerability allows a rogue actor to create chaos without even stepping onto the stage. If exploited, this flaw could lead to a complete service outage, disrupting operations for users and causing significant downtime. It’s not just a hiccup; it’s like a power outage for your entire system, leaving everything dark and unresponsive.

Put simply

Think of it like a juggler who drops all their balls because someone sneakily yanked away the stage light — the show stops instantly. This vulnerability allows a rogue actor to create chaos without even stepping onto the stage. The vulnerability arises from an uncaught exception in the system, allowing attackers to remotely trigger a crash in core PI services, effectively denying service to legitimate users and processes.

What to do

If exploited, this flaw could lead to a complete service outage, disrupting operations for users and causing significant downtime. It’s not just a hiccup; it’s like a power outage for your entire system, leaving everything dark and unresponsive. To protect your systems, upgrade to the latest version as soon as possible. Ensure proper exception handling and monitoring is in place to catch these issues before they escalate. Conduct regular security audits to identify any other potential weak spots. You've got this! With these steps, your systems will be shining bright in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00332 · 25.2th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2026-02-10T20:19Z
EPSS history
Timeline
  • 10 FEB 20:19Z
    Uncaught Exception vulnerability in AVEVA PI Data Archive
    cvelistv5