What is the arcinfo CNA?

arcinfo is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 5 CVE records since 2024.

How many CVEs has arcinfo published?

arcinfo has published 5 CVE records, including 5 in the last two years.

What is arcinfo's CVE data quality grade?

RadicalNotion.AI grades arcinfo's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.

What products does arcinfo publish CVEs for?

arcinfo most frequently publishes CVEs for PcVue, MQTT add-on.

Which vendors does arcinfo cover?

arcinfo publishes CVEs across 1 distinct vendors, most often arcinfo.

Is arcinfo actively publishing CVEs?

arcinfo is currently active, based on 5 CVEs in the last two years.

What is the average severity of arcinfo's CVEs?

The average CVSS base score across arcinfo's scored CVEs is 4.7.

What are the most common weakness types in arcinfo's CVEs?

arcinfo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1385 (Missing Origin Validation in WebSockets), CWE-1390 (Weak Authentication), CWE-201 (Insertion of Sensitive Information Into Sent Data).

How does arcinfo rank among CNAs?

By total CVE volume, arcinfo ranks #357 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Grade A

Active

arcinfo

Name: arcinfo CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published September 5, 2025

5

CVEs published

Total assigned

0.8

Years active

2024–2025

4.7

Avg CVSS

Across scored CVEs

5

Recent CVEs

Last 2 years

Overview

arcinfo is a CVE Numbering Authority that has published 5 CVE records since 2024. It is currently classified as active, with 5 CVEs published in the last two years. Its CVE data quality is graded A (100% overall completeness).

Among the 370 CNAs tracked here, arcinfo ranks #357 by CVE volume and reports more complete records than 60% of all CNAs.

Data quality report card

How complete and consistent arcinfo's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often arcinfo also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

A

100%

Overall score

Overall completeness100%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness100%

100%

Update rate

Records revised after publishing

1

Vendor diversity

Distinct vendors covered

294 chars

Avg description length

Per CVE record

2024-12-04

First CVE date

Earliest assignment

2025-09-05

Latest CVE date

Most recent assignment

4.7

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of arcinfo's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical0

High2

Medium8

Low4

In CISA’s Known Exploited Vulnerabilities catalog

0

None of arcinfo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories arcinfo most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs arcinfo has published each year.

2024

2

2025

3

2026

9

Top vendors

The vendors arcinfo publishes the most CVEs for.

arcinfo14 CVEs

Top products

The products arcinfo publishes the most CVEs for.

PcVue14 CVEs
MQTT add-on1 CVEs

Latest CVEs

The most recent CVEs assigned by arcinfo.

CVE-2026-14868CWE-326
Weak encryption mechanism for User directory
High · CVSS 8.4
EPSS 0.1%2026-07-07
CVE-2026-14867CWE-256
Insecure password storage in User directory
Medium · CVSS 6.8
EPSS 0.1%2026-07-07
CVE-2026-1698CWE-644
HTTP Host header vulnerability in WebClient and WebScheduler web apps
Medium · CVSS 5.3
EPSS 0.2%2026-02-26
CVE-2026-1697CWE-614
Use of unsecure cookies for GraphicalData web service and WebClient web app
Medium · CVSS 5.3
EPSS 0.1%2026-02-26
CVE-2026-1696CWE-79
Missing security HTTP headers
Low · CVSS 2.3
EPSS 0.1%2026-02-26
CVE-2026-1695CWE-79
XSS vulnerability upon unsuccessful authentication
Medium · CVSS 5.3
EPSS 0.2%2026-02-26
CVE-2026-1694CWE-201
Server configuration details in HTTP headers
Low · CVSS 2.3
EPSS 0.2%2026-02-26
CVE-2026-1693CWE-1390
Use of vulnerable Resource Owner Password Credentials flow
Medium · CVSS 5.3
EPSS 0.3%2026-02-26
CVE-2026-1692CWE-1385
Missing origin validation in GraphicalData web service requests
Medium · CVSS 5.3
EPSS 0.1%2026-02-26
CVE-2025-9999CWE-1288
Improper validation of payload elements
High · CVSS 7.6
EPSS 0.1%2025-09-05
CVE-2025-9998CWE-754
Improper validation of packets sequencing
Medium · CVSS 6.0
EPSS 0.2%2025-09-05
CVE-2025-4384CWE-298
Certificate validity not properly verified
Medium · CVSS 6.0
EPSS 0.1%2025-05-06

Track new arcinfo CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor arcinfo CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the arcinfo CNA.

What is the arcinfo CNA?: arcinfo is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 5 CVE records since 2024.
How many CVEs has arcinfo published?: arcinfo has published 5 CVE records, including 5 in the last two years.
What is arcinfo's CVE data quality grade?: RadicalNotion.AI grades arcinfo's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
What products does arcinfo publish CVEs for?: arcinfo most frequently publishes CVEs for PcVue, MQTT add-on.
Which vendors does arcinfo cover?: arcinfo publishes CVEs across 1 distinct vendors, most often arcinfo.
Is arcinfo actively publishing CVEs?: arcinfo is currently active, based on 5 CVEs in the last two years.
What is the average severity of arcinfo's CVEs?: The average CVSS base score across arcinfo's scored CVEs is 4.7.
Are any of arcinfo's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of arcinfo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in arcinfo's CVEs?: arcinfo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1385 (Missing Origin Validation in WebSockets), CWE-1390 (Weak Authentication), CWE-201 (Insertion of Sensitive Information Into Sent Data).
How does arcinfo rank among CNAs?: By total CVE volume, arcinfo ranks #357 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track arcinfo CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing