CVE-2026-1694CWE-201

Server configuration details in HTTP headers

Low · published February 26, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:U/RE:M/U:Clear
EPSS
0.00175 · 6.6th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-02-26T07:56Z
EPSS history
Timeline
  • 26 FEB 07:56Z
    Server configuration details in HTTP headers
    cvelistv5