CVE-2026-42933 identifies a CWE-441 unintended proxy or intermediary ('Confused Deputy') vulnerability in Pronetiqs Panduit Intravue versions 3.2.1a14 and prior. The flaw allows an attacker to exploit the product as an active proxy, which could bypass OT segmentation controls. The vulnerability is rated critical with a CVSS 3.1 base score of 10. No vendor advisory or patch information is available at this time, and the product is not a cloud service, so remediation depends on vendor action or workaround implementation.

Successful exploitation could allow an unauthenticated attacker to use the vulnerable product as a proxy, bypassing network segmentation designed to isolate operational technology environments. This could lead to full confidentiality, integrity, and availability compromise of affected systems, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider restricting network access to the affected product, monitor for unusual proxying behavior, and apply compensating controls to maintain OT segmentation integrity.