Aarcinfo

Products

Exploited and recent CVEs

• CVE-2026-14868 High 8.4 Weak encryption mechanism for User directory <0.1%
• CVE-2026-14867 Medium 6.8 Insecure password storage in User directory 0.1%
• CVE-2026-1698 Medium 5.3 HTTP Host header vulnerability in WebClient and WebScheduler web apps 0.2%
• CVE-2026-1697 Medium 5.3 Use of unsecure cookies for GraphicalData web service and WebClient web app 0.1%
• CVE-2026-1696 Low 2.3 Missing security HTTP headers 0.2%
• CVE-2026-1695 Medium 5.3 XSS vulnerability upon unsuccessful authentication 0.2%
• CVE-2026-1694 Low 2.3 Server configuration details in HTTP headers 0.2%
• CVE-2026-1693 Medium 5.3 Use of vulnerable Resource Owner Password Credentials flow 0.4%
• CVE-2026-1692 Medium 5.3 Missing origin validation in GraphicalData web service requests 0.1%
• CVE-2025-9999 High 7.6 Improper validation of payload elements 0.2%
• CVE-2025-9998 Medium 6.0 Improper validation of packets sequencing 0.3%
• CVE-2025-4384 Medium 6.0 Certificate validity not properly verified 0.1%
• CVE-2024-12057 Low 1.8 User credentials recorded in log files 0.1%
• CVE-2024-12056 Low 2.3 Client Secret not checked with OAuth Password grant type 0.4%