CVE-2026-22915

6.5 mediumEPSS 0.4%

Medium (6.5) in sick tdc-x401gl firmware. EPSS 0.4% chance of exploitation in the next 30 days.

An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information.

Severity

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-497
Published: 2026-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19