QwikSec

Security Database

CVE

CWE

Training

CVE-2026-1694

Published: Feb 26, 2026

Modified: Mar 26, 2026

PUBLISHED

Description

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.

Vendor	Product	Versions
arcinfo	PcVue	affected `16.0.0 - <= 16.3.3` affected `15.0.0 - <= 15.2.13` affected `12.0.0`

Weaknesses (CWE)

References

https://www.pcvue.com/security/#SB2026-2

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.