CVE-2026-81824

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-81824", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "state": "PUBLISHED", "assignerShortName": "icscert", "dateReserved": "2026-08-27T13:26:12.638Z", "datePublished": "2026-09-08T17:32:40.309Z", "dateUpdated": "2026-09-11T14:30:02.185Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-09-11T14:30:02.185Z"}, "title": "AVEVA Pipeline Integrity Monitor cross-site scripting", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')", "type": "CWE"}]}], "affected": [{"vendor": "AVEVA", "product": "Pipeline Integrity Monitor", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "Versions 2025 SP1 P1 (build 7.1.9580.8513)", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link."}]}], "references": [{"url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-253-01.json"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"}}], "workarounds": [{"lang": "en", "value": "AVEVA recommends the following general defensive measures:\n * Restrict Network Access: Implement host-based and/or network firewall controls on all nodes\u00a0hosting the PIMBoards API to ensure that only trusted client systems are permitted to establish\u00a0connections.\n * Apply strong Access Control Lists to all folders storing project files to ensure only trusted users\u00a0have read-access.\n * Maintain a trusted chain-of-custody on project files during creation, modification, distribution,\u00a0backups, and use.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "AVEVA recommends the following general defensive measures:<br><ul><li><b>Restrict Network Access</b>: Implement host-based and/or network firewall controls on all nodes&nbsp;hosting the PIMBoards API to ensure that only trusted client systems are permitted to establish&nbsp;connections.</li><li><b>Apply strong Access Control Lists</b> to all folders storing project files to ensure only trusted users&nbsp;have read-access.</li><li><b>Maintain a trusted chain-of-custody on project files</b> during creation, modification, distribution,&nbsp;backups, and use.</li></ul>"}]}], "solutions": [{"lang": "en", "value": "AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected product versions or affected PIMBoards project files should take the following actions to mitigate the risk of exploit:\n * Apply AVEVA Pipeline Integrity Monitor 2025 SP1 P2 Security Update and migrate old project\u00a0files.\n * For project files that cannot be migrated (e.g. backups or transient copies), evaluate the risk of\u00a0potential password leakage from these files and implement stricter read access controls to\u00a0protect these unsafe files.\n * Require AVEVA Pipeline Integrity Monitor PIMBoards users to change their passwords.\n\n\nImportant: PIMBoards Project Files migration from older versions to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 is one-way due to the changes in password hashing algorithms and end-user managed encryption keys.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected product versions or affected PIMBoards project files should take the following actions to mitigate the risk of exploit:<br><ul><li>Apply AVEVA Pipeline Integrity Monitor 2025 SP1 P2 Security Update and migrate old project&nbsp;files.</li><li>For project files that cannot be migrated (e.g. backups or transient copies), evaluate the risk of&nbsp;potential password leakage from these files and implement stricter read access controls to&nbsp;protect these unsafe files.</li><li>Require AVEVA Pipeline Integrity Monitor PIMBoards users to change their passwords.</li></ul>Important: PIMBoards Project Files migration from older versions to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 is one-way due to the changes in password hashing algorithms and end-user managed encryption keys."}]}, {"lang": "en", "value": "AVEVA Pipeline Simulation media delivers AVEVA Pipeline Integrity Monitor:\n * All affected versions can be fixed by upgrading to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 or higher:\n\n\n https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa", "supportingMedia": [{"type": "text/html", "base64": false, "value": "AVEVA Pipeline Simulation media delivers AVEVA Pipeline Integrity Monitor:<br><ul><li>All affected versions can be fixed by upgrading to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 or higher:</li></ul><a href=\"https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa\">https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa</a>"}]}], "credits": [{"lang": "en", "value": "Adham Khairy Ramadan discovered and reported this vulnerability to AVEVA through a private HackerOne bug bounty program.", "type": "finder"}], "source": {"advisory": "AVEVA-2026-006", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}, "datePublic": "2026-09-08T16:58:00.000Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-08T18:27:19.677749Z", "id": "CVE-2026-81824", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T18:27:39.482Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-81824", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-08T18:27:19.677749Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T18:27:27.759Z"}}], "cna": {"title": "AVEVA Pipeline Integrity Monitor cross-site scripting", "source": {"advisory": "AVEVA-2026-006", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Adham Khairy Ramadan discovered and reported this vulnerability to AVEVA through a private HackerOne bug bounty program."}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AVEVA", "product": "Pipeline Integrity Monitor", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "Versions 2025 SP1 P1 (build 7.1.9580.8513)"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected product versions or affected PIMBoards project files should take the following actions to mitigate the risk of exploit:\n * Apply AVEVA Pipeline Integrity Monitor 2025 SP1 P2 Security Update and migrate old project\u00a0files.\n * For project files that cannot be migrated (e.g. backups or transient copies), evaluate the risk of\u00a0potential password leakage from these files and implement stricter read access controls to\u00a0protect these unsafe files.\n * Require AVEVA Pipeline Integrity Monitor PIMBoards users to change their passwords.\n\n\nImportant: PIMBoards Project Files migration from older versions to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 is one-way due to the changes in password hashing algorithms and end-user managed encryption keys.", "supportingMedia": [{"type": "text/html", "value": "AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected product versions or affected PIMBoards project files should take the following actions to mitigate the risk of exploit:<br><ul><li>Apply AVEVA Pipeline Integrity Monitor 2025 SP1 P2 Security Update and migrate old project&nbsp;files.</li><li>For project files that cannot be migrated (e.g. backups or transient copies), evaluate the risk of&nbsp;potential password leakage from these files and implement stricter read access controls to&nbsp;protect these unsafe files.</li><li>Require AVEVA Pipeline Integrity Monitor PIMBoards users to change their passwords.</li></ul>Important: PIMBoards Project Files migration from older versions to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 is one-way due to the changes in password hashing algorithms and end-user managed encryption keys.", "base64": false}]}, {"lang": "en", "value": "AVEVA Pipeline Simulation media delivers AVEVA Pipeline Integrity Monitor:\n * All affected versions can be fixed by upgrading to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 or higher:\n\n\n https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa", "supportingMedia": [{"type": "text/html", "value": "AVEVA Pipeline Simulation media delivers AVEVA Pipeline Integrity Monitor:<br><ul><li>All affected versions can be fixed by upgrading to AVEVA Pipeline Integrity Monitor 2025 SP1 P2 or higher:</li></ul><a href=\"https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa\">https://softwaresupportsp.aveva.com/en-US/downloads/products/details/021a26a7-200f-44eb-8cc9-cd57b7e349aa</a>", "base64": false}]}], "datePublic": "2026-09-08T16:58:00.000Z", "references": [{"url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-253-01.json"}], "workarounds": [{"lang": "en", "value": "AVEVA recommends the following general defensive measures:\n * Restrict Network Access: Implement host-based and/or network firewall controls on all nodes\u00a0hosting the PIMBoards API to ensure that only trusted client systems are permitted to establish\u00a0connections.\n * Apply strong Access Control Lists to all folders storing project files to ensure only trusted users\u00a0have read-access.\n * Maintain a trusted chain-of-custody on project files during creation, modification, distribution,\u00a0backups, and use.", "supportingMedia": [{"type": "text/html", "value": "AVEVA recommends the following general defensive measures:<br><ul><li><b>Restrict Network Access</b>: Implement host-based and/or network firewall controls on all nodes&nbsp;hosting the PIMBoards API to ensure that only trusted client systems are permitted to establish&nbsp;connections.</li><li><b>Apply strong Access Control Lists</b> to all folders storing project files to ensure only trusted users&nbsp;have read-access.</li><li><b>Maintain a trusted chain-of-custody on project files</b> during creation, modification, distribution,&nbsp;backups, and use.</li></ul>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.", "supportingMedia": [{"type": "text/html", "value": "The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-09-11T14:30:02.185Z"}}}, "cveMetadata": {"cveId": "CVE-2026-81824", "state": "PUBLISHED", "dateUpdated": "2026-09-11T14:30:02.185Z", "dateReserved": "2026-08-27T13:26:12.638Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2026-09-08T17:32:40.309Z", "assignerShortName": "icscert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Pipeline Integrity Monitor", "vendor": "AVEVA", "versions": [{"lessThanOrEqual": "Versions 2025 SP1 P1 (build 7.1.9580.8513)", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "ics-cert@hq.dhs.gov"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link."}], "id": "CVE-2026-81824", "lastModified": "2026-09-11T15:17:05.763", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-81824", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-08T18:27:19.677749Z", "version": "2.0.3"}}]}, "published": "2026-09-08T18:20:57.880", "references": [{"source": "ics-cert@hq.dhs.gov", "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-253-01.json"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,Versions 2025 SP1 P1 (build 7.1.9580.8513)]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Pipeline Integrity Monitor", "source": "cna", "vendor": "AVEVA"}, "product": "pipeline_integrity_monitor", "vendor": "aveva"}], "created": "2026-09-08T19:15:16.204111+00:00", "updated": "2026-09-08T20:34:27.439397+00:00", "vendors": ["aveva", "aveva$PRODUCT$pipeline_integrity_monitor"]}