CVE-2026-22098CWE-532

Sensitive information is written to logs

Critical · published July 13, 2026

CVSS v4.0

9.2

EPSS

0%

Percentile

36.0

In the wild

Unconfirmed

What it is

Various sensitive information such as passwords and charging card UIDs are written to log files.

The record

Technical detail

CVSS v4.0: 9.2 · CRITICAL
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS: 0.00428 · 36.0th percentile
Weakness: CWE-532 · Insertion of Sensitive Information into Log File
Published: 2026-07-13T09:10Z

EPSS history

Timeline

13 JUL 09:10Z
Sensitive information is written to logs
cvelistv5