CVE-2026-0936: Insertion of Sensitive Information into Logfile
An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0936?
CVE-2026-0936 has been classified as a medium severity vulnerability due to the potential for information disclosure.
How do I fix CVE-2026-0936?
To mitigate CVE-2026-0936, upgrade the B&R PVI client to version 6.5 or later.
Who is affected by CVE-2026-0936?
CVE-2026-0936 affects all authenticated users of B&R PVI client versions prior to 6.5.
What type of information can be compromised by CVE-2026-0936?
CVE-2026-0936 can lead to the exposure of sensitive credential information logged by the PVI client application.
Can CVE-2026-0936 be exploited remotely?
No, CVE-2026-0936 requires an authenticated local attacker to exploit the vulnerability.