CVE-2026-1692 | arcinfo PcVue up to 12.0.0/15.2.13/16.3.3 WebVue/WebScheduler/TouchVue/SnapVue connect missing origin validation in websockets

February 26, 2026 Yanac

A vulnerability identified as problematic has been detected in arcinfo PcVue up to 12.0.0/15.2.13/16.3.3. This affects an unknown part of the file GraphicalData/js/signalR/connect of the component WebVue/WebScheduler/TouchVue/SnapVue. This manipulation causes missing origin validation in websockets.

This vulnerability is registered as CVE-2026-1692. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More