CVE-2020-26867

CRITICAL

CVSS v3.1: 9.8 · EPSS: 0.0372 (88.5 percentile)

NetworkNo privilegesNo user interactionInsecure DeserializationVendor advisory ref

Source data as of:

At a glance

Severity
CRITICAL
CVSS
9.8 v3.1 · NVD
EPSS
0.0372 (88.5 percentile) · FIRST.org
CISA KEV
No
Type
Insecure Deserialization · NVD CWE
Attack conditions (CVSS vector)
NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors
arcinfo
Published
2020-10-12 · Modified: 2026-07-09
References
Jump to references (4)

CVSS / EPSS / KEV

CVSS v3.1 9.8 / 10 CRITICAL Source: NVD
EPSS 0.0372 88.5 percentile Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

Record details

CVE ID
CVE-2020-26867
CVSS (v3.1)
9.8 (CRITICAL)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore
3.9
Impact subscore
5.9
EPSS
0.0372 (88.5 percentile) — 2026-07-10
CISA KEV
No
Weakness (CWE)
CWE-502
Affected vendors
arcinfo
Affected configurations (CPE)
1
Published
2020-10-12
Modified
2026-07-09
Status
Modified

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Related records

Other records sharing a factual facet, for cross-reference. A descriptive neighbourhood — ordering does not imply priority and is not a recommendation.

Same affected vendor

CVE-2020-26868 HIGH CVSS 7.5 CVE-2020-26869 HIGH CVSS 7.5 CVE-2026-1693 HIGH CVSS 7.5 CVE-2026-1697 MEDIUM CVSS 6.5

Same weakness type (CWE)

CVE-2026-59827 CRITICAL CVSS 9.9 CVE-2021-42237 CRITICAL CVSS 9.8 KEV CVE-2026-58025 CRITICAL CVSS 9.8 CVE-2026-39832 CRITICAL CVSS 9.1

Published the same year

CVE-2020-26868 HIGH CVSS 7.5 CVE-2020-26869 HIGH CVSS 7.5
← Back to all records