maxhub pivot

CISA published an industrial-control-system advisory on May 7, 2026, warning that MAXHUB Pivot client application versions before v1.36.2 expose tenant email data and metadata through a hardcoded AES key and may allow unauthorized MQTT device enrollment causing denial of service. The advisory is...

MAXHUB Pivot’s password‑reset weakness is a serious, actionable vulnerability that demands immediate attention from administrators who manage MAXHUB fleet services or integrate Pivot-managed displays into corporate and operational networks. The vendor and coordinating agency recommend an urgent...