Log in Start free

Vulnerability · Published Jan 29, 2026 · Assigned by ABB

CVE-2026-0936Insertion of Sensitive Information into Logfile

Medium 5.0

In plain English

A medium-severity sensitive data in logs in Process Visualization Interface (PVI) from B&R Industrial Automation GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)5.0Medium
Exploit odds (30 days)0.1%top 97.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user.

Affected products (as reported)

VendorProductVersions
B&R Industrial Automation GmbH Process Visualization Interface (PVI) 46 – before 6.5

Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

References