CVE-2026-22537 MEDIUM

CVE-2026-22537: INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

Vendor Efacec

Product QC 60/90/120

Weakness CWE-497

Published January 7, 2026

Last update January 7, 2026

View on NVD All CVEs

CVSS base score

6.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker.

Key dates

02Disclosure timeline

January 7, 2026 CVE published

January 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-22537 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/497.html