CVE-2026-22101CWE-200information-disclosure

CVE-2026-22101

published September 29, 2026

CVSS
5.1
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
5.1 · CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00144 · 3.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-09-29T19:17Z
References (1)
https://csirt.divd.nl/DIVD-2026-00001/ · [email protected]
EPSS history
Timeline
  • 01 OCT 03:45Z
    EPSS moved — → 0%
    epss
  • 29 SEP 14:31Z
    Sensitive information leak through hidden menu
    cvelistv5