Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-81824

AVEVA Pipeline Integrity Monitor cross-site scripting

CVSS 4.0 6.3 MEDIUMCVSS 3.1 4.7 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-81824

Published

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-81824

Published

Pipeline Integrity Monitor

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "AVEVA",
                    "product": "Pipeline Integrity Monitor",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "Versions 2025 SP1 P1 (build 7.1.9580.8513)",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON