CVE-2026-28698 describes a vulnerability in Pronetiqs Panduit Intravue (versions 3.2.1a14 and prior) where sensitive system information is exposed to unauthorized control spheres. This exposure may allow attackers to access underlying host or shared filesystem details. The vulnerability is identified as CWE-497, indicating improper exposure of sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) indicates that the vulnerability is remotely exploitable without privileges or user interaction, affects confidentiality with a high impact, and has a scope change. No vendor advisory or patch information is provided, and the remediation level is unspecified.

An attacker can remotely access sensitive system information without authentication or user interaction, potentially gaining detailed knowledge of the underlying host or shared filesystem. This could facilitate further attacks or unauthorized data access. The confidentiality impact is high, but integrity and availability are not affected. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently documented, organizations should monitor vendor communications for updates. Until a patch is available, restrict network access to the affected system to trusted sources and apply network-level controls to limit exposure.