CVE-2026-9274CWE-312

Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

Medium · published May 25, 2026

CVSS v4.0
5.2
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including cryptographic private keys, Wi-Fi credentials and configuration data stored in RAM of the targeted device.

Successful exploitation of this vulnerability could allow unauthorized access to encrypted communications and connected wireless network of the targeted device.

The record
Technical detail
CVSS v4.0
5.2 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N
EPSS
0.00134 · 2.7th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2026-05-25T09:19Z
EPSS history
Timeline
  • 25 MAY 09:19Z
    Information Exposure Vulnerability in CP-Plus Wi-Fi Camera
    cvelistv5