CVE-2026-22915CWE-497

An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information

Medium · published January 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00408 · 33.9th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-01-15T13:06Z
EPSS history
Timeline
  • 15 JAN 13:06Z
    An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information
    cvelistv5