CVE-2026-42933
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. The following versions of Panduit IntraVUE are affected: IntraVUE <=3.2.1a14 CVSS Vendor Equipment Vulnerabilities v3 10 Pronetiqs Panduit IntraVUE Plaintext Storage of a Password, Unintended Proxy or Intermediary ('Confused Deputy'), Exposure of Sensitive System Information to an Unauthorized Control Sphere, Inadequate Encryption Strength Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Information Technology, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: Netherlands Vulnerabilities Expand All + CVE-2026-40430 Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-256 Plaintext Storage of a Password Metrics CVSS Version Base Score Base Severity Vector String 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2026-42933 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations
CSIRTS triage
- What
- Vulnerabilities could allow manipulation of industrial control devices without physical access.
- Who is affected
- Deployments of IntraVUE version 3.2.1a14 and earlier.
- Urgency
- Remediation is critical due to the potential for severe impacts on critical infrastructure.
- Action
- Update to a version greater than 3.2.1a14.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-42933
Get an email if CVE-2026-42933 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
Advisory coverage (2)
- criticalCVE-2026-42933: Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulner…nvd · 2026-07-23
- criticalPanduit IntraVUEcisa · 2026-07-23
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-42933)