CVE-2026-52622

Published: Sep 25, 2026Modified: Sep 30, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: MITRE (Secondary)

Description

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://jl-zhenlaixiaowei.blog.csdn.net/article/details/166365472?spm=1001.2014.3001.5502

Source: cve@mitre.org

Timeline

No history available yet.