CVE-2026-81824

CVE-2026-81824 is a cross-site scripting flaw (CWE-79) in PIMBoards, the dashboard/boards component of AVEVA Pipeline Integrity Monitor. An attacker must socially engineer an authenticated PIMBoards user into clicking a malicious link, which then causes attacker-controlled JavaScript to run inside that user's browser session. Successful exploitation would let the attacker act within the victim's session, and the CVSS 4.0 vector's high integrity and availability impacts on subsequent systems indicate the injected script could take actions affecting connected or downstream systems. Only users of the PIMBoards component of Pipeline Integrity Monitor who follow a malicious link are affected; unexposed or unattended deployments face little risk. No public proof-of-concept is known, the flaw is not in CISA KEV, and EPSS puts 30-day exploitation probability at 0.3% (22nd percentile), so exploitation is not currently observed.

What to do: Monitor the CISA ICS advisory and AVEVA product notifications for the affected version list and patched release, then upgrade Pipeline Integrity Monitor/PIMBoards when a fix is published. Until patched, restrict web access to the PIMBoards interface to trusted users and networks and caution users against clicking unsolicited links. Because no exploit or in-the-wild activity is known, there is no urgent compromise-hunting action, but log review of PIMBoards web sessions is reasonable for high-value pipeline environments.