Is CVE-2026-50044 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-50044 being exploited in the wild.

How severe is CVE-2026-50044?

Medium severity, with a CVSS score of 6.8, published 23 July 2026.

Which products and versions are affected?

Pronetiqs (Panduit) IntraVUE <= 3.2.1a14.

Is there a fix for CVE-2026-50044?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-50044 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-50044?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-50044: Pronetiqs IntraVUE inadequate encryption strength

Q: Is there a fix for CVE-2026-50044?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-50044 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-50044?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-50044 · Severity: medium · CVSS 6.8 · Published 2026-07-23

Pronetiqs IntraVUE, a software tool used to monitor and manage industrial control system (ICS) networks, contains a security weakness in how it encrypts credentials. An attacker with low-level access to the network could exploit this weak encryption to steal administrative passwords. This could allow an unauthorized user to take full control of the monitoring system and potentially manipulate industrial devices.

Quick answers

Is CVE-2026-50044 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-50044 being exploited in the wild.
How severe is CVE-2026-50044?: Medium severity, with a CVSS score of 6.8, published 23 July 2026.
Which products and versions are affected?: Pronetiqs (Panduit) IntraVUE <= 3.2.1a14.
Is there a fix for CVE-2026-50044?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-50044 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-50044?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Pronetiqs IntraVUE (versions 3.2.1a14 and prior) suffers from inadequate encryption strength (CWE-326). The vulnerability stems from the use of weak cryptographic hashes for credential storage or transmission. A network-based attacker with low-privileged access can exploit this to recover administrative credentials or perform pass-the-hash attacks. While the attack requires high complexity (AC:H), successful exploitation grants the attacker high confidentiality and integrity impact over the system. Users are advised to upgrade to version 3.2.1a16 or later to remediate the issue.

Affected products

Pronetiqs (Panduit) IntraVUE <= 3.2.1a14

Timeline

2026-07-23: disclosed
2026-07-23: advisory: CISA Advisory ICSA-26-204-04 published

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.