Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-52622

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270…

Risk score
54/100
CVSS
7.5 v3.1
Exploit chance (30 days)
0.3%
Published
25 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.5 high
  • Remotely exploitable without logging in

References

Original description

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function

Last activity 25 Sep 2026. Patch Forecast updates every hour.