CVE-2026-1697CWE-1275CWE-614

Use of unsecure cookies for GraphicalData web service and WebClient web app

Medium · published February 26, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Clear
EPSS
0.00122 · 1.8th percentile
Weaknesses
CWE-1275 · Sensitive Cookie with Improper SameSite Attribute; CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2026-02-26T07:57Z
EPSS history
Timeline
  • 26 FEB 07:57Z
    Use of unsecure cookies for GraphicalData web service and WebClient web app
    cvelistv5