PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-52622 Wellav Technologies Co., Ltd CVE debrief

CVE-2026-52622 debrief based on the supplied source corpus. The CVE record was published on 2026-09-25T13:17:14.787Z and has not been modified since then. This HIGH-severity vulnerability in Wellav WES Emergency Broadcast Terminals allows remote attackers to obtain sensitive information. Defenders should assess exposure, especially for versions before 08-08-2023, and prioritize verification and potential updates. The vulnerability exists in the global API request wrapper function, potentially impacting emergency broadcast systems.

Vendor
Wellav Technologies Co., Ltd
Product
Wellav WES Emergency Broadcast Terminal (WES100, WES270, WES280, WES290)
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-25
Original CVE updated
2026-09-25
Advisory published
2026-09-25
Advisory updated
2026-09-25

Who should care

Defenders responsible for Wellav WES Emergency Broadcast Terminals, especially those using versions before 08-08-2023, should assess exposure and prioritize verification and potential updates.

Why it matters

CVE-2026-52622 is a HIGH-severity vulnerability in Wellav WES Emergency Broadcast Terminals that allows remote attackers to obtain sensitive information. Defenders should prioritize verifying exposure, especially for versions before 08-08-2023, and assess the need for updates or compensating controls.

  • Potential sensitive information disclosure
  • Need for verification of exposure and potential updates
  • Possible impact on emergency broadcast systems

Technical summary

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function. This HIGH-severity vulnerability can lead to sensitive information disclosure and requires defenders to verify exposure and assess the need for updates or compensating controls.

Defensive priority

Defenders should prioritize verifying exposure of Wellav WES Emergency Broadcast Terminals, especially versions before 08-08-2023, and assess the need for updates or compensating controls.

Recommended defensive actions

  • Verify exposure of Wellav WES Emergency Broadcast Terminals, especially versions before 08-08-2023
  • Assess the need for updates or compensating controls
  • Monitor for potential sensitive information disclosure

Evidence notes

The CVE description notes an issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 that allows a remote attacker to obtain sensitive information via the global API request wrapper function. The CVSS score is 7.5 with a HIGH severity.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-52622 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-52622

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-52622 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-52622

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.