CVE-2026-44955 describes a vulnerability in Pronetiqs Panduit Intravue (versions 3.2.1a14 and prior) where sensitive system information is exposed to unauthorized control spheres. This exposure allows unauthenticated users to discover assets within the affected system. The vulnerability is categorized as CWE-497. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and limited confidentiality impact without integrity or availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthenticated attackers to gain access to sensitive system information, which could facilitate asset discovery. This may aid attackers in reconnaissance activities but does not directly impact system integrity or availability. The confidentiality impact is limited but notable due to unauthorized information exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the affected system and limiting exposure to untrusted networks may reduce risk.