CVE-2026-5601
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Acrel Electrical Prepaid Cloud Platform 1.0 discloses information via the /bin.rar file in the Backup File Handler component. Remote exploitation is possible and the exploit is public.
Risk Assessment
An unauthenticated attacker can access sensitive data stored in the backup, leading to information disclosure.
Recommendation
Contact the vendor for a patch or restrict access to the /bin.rar file.
Original NVD description (English source)
A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.