A vulnerability, which was classified as problematic, was found in arcinfo PcVue up to 12.0.0/15.2.13/16.3.3. This impacts an unknown function of the component HTTP Security Header Handler. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-1696. The attack can be launched remotely. No exploit exists.