Is CVE-2026-40430 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-40430 being exploited in the wild.

How severe is CVE-2026-40430?

High severity, with a CVSS score of 7.5, published 23 July 2026.

Which products and versions are affected?

Pronetiqs (Panduit) IntraVUE <= 3.2.1a14.

Is there a fix for CVE-2026-40430?

A patch was published on 2026-07-23: Version 3.2.1a16 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-40430 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-40430?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-40430: Pronetiqs IntraVUE plaintext password storage in API

Q: Is there a fix for CVE-2026-40430?

A patch was published on 2026-07-23: Version 3.2.1a16 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-40430 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-40430?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-40430 · Severity: high · CVSS 7.5 · Published 2026-07-23

Pronetiqs IntraVUE, a software tool used to monitor and manage industrial control system (ICS) networks, contains a security flaw where user passwords are stored in plain text. An attacker could exploit this to steal login credentials through the application's programming interface (API). This could lead to unauthorized access to sensitive industrial network data and management functions.

Quick answers

Is CVE-2026-40430 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-40430 being exploited in the wild.
How severe is CVE-2026-40430?: High severity, with a CVSS score of 7.5, published 23 July 2026.
Which products and versions are affected?: Pronetiqs (Panduit) IntraVUE <= 3.2.1a14.
Is there a fix for CVE-2026-40430?: A patch was published on 2026-07-23: Version 3.2.1a16 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-40430 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-40430?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A plaintext storage of passwords vulnerability (CWE-256) exists in Pronetiqs IntraVUE versions 3.2.1a14 and prior. The vulnerability is accessible via the application's API, where credentials can be exposed in cleartext to unauthorized users. An attacker with network access to the IntraVUE instance can exploit this flaw without authentication or user interaction to obtain valid credentials. This could facilitate further lateral movement or unauthorized configuration changes within the industrial control environment. The vendor has released version 3.2.1a16 to address this issue.

Affected products

Pronetiqs (Panduit) IntraVUE <= 3.2.1a14

Timeline

2026-07-23: disclosed
2026-07-23: advisory: CISA Advisory ICSA-26-204-04 published
2026-07-23: patched: Version 3.2.1a16 released

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.