CVE-2026-81821: CWE-321 Use of hard-coded cryptographic key in AVEVA Pipeline Integrity Monitor

This vulnerability (CVE-2026-81821) in AVEVA Pipeline Integrity Monitor is classified under CWE-321, which concerns the use of hard-coded cryptographic keys. The presence of a hard-coded key allows an attacker with read access to project files to decrypt sensitive data. The CVSS 4.0 vector indicates local attack vector with low attack complexity, requiring low privileges but no user interaction, and high impact on confidentiality and system components. No known exploits are reported in the wild, and no official patch or vendor advisory information is provided.

Exploitation could lead to unauthorized decryption and disclosure of sensitive information contained within PIMBoards project files. This compromises confidentiality and potentially the integrity of the data managed by the Pipeline Integrity Monitor. The vulnerability requires an attacker to have read access to project files, which limits the attack surface but still poses a significant risk if such access is obtained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to PIMBoards project files to trusted users only and monitor for unauthorized access attempts.