CVE-2026-101083 - PMWeb encryptionhelper.dll information disclosure

Back Back to CVE browser

MEDIUM

PMWeb encryptionhelper.dll information disclosure

Published Sep 28, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.32%

Description

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Pmweb Product PMWeb Default
n/a
- Version
  v2025.*
  Status
  affected
  Constraints
  -
- Version
  v7.*
  Status
  affected
  Constraints
  -
- Version
  v8.*
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pmweb

PMWeb

n/a

Version	Status	Constraints
v2025.*	affected	-
v7.*	affected	-
v8.*	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (4)

https://vuldb.com/cve/CVE-2026-101083
third-party-advisory
https://vuldb.com/submit/929822
exploitthird-party-advisory
https://vuldb.com/vuln/410955
vdb-entry
https://vuldb.com/vuln/410955/cti
signaturepermissions-required

Link	Providers	Tags
https://vuldb.com/cve/CVE-2026-101083		third-party-advisory
https://vuldb.com/submit/929822		exploitthird-party-advisory
https://vuldb.com/vuln/410955		vdb-entry
https://vuldb.com/vuln/410955/cti		signaturepermissions-required