CVE-2026-5601

CVE-2026-5601 affects Acrel Electrical Prepaid Cloud Platform version 1.0 and involves an information disclosure vulnerability in the Backup File Handler component, specifically through improper processing of the /bin.rar file. The vulnerability allows unauthorized access to sensitive information through an unknown processing mechanism. A CVSS score of 5.3 (Medium severity) with a network-based attack vector indicates this can be exploited remotely without authentication or user interaction required. The EPSS score of 0.00039 suggests relatively low probability of exploitation in the wild compared to other CVEs. While proof-of-concept code has been publicly disclosed and the vendor was notified but did not respond, the vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and shows no signs of active exploitation in the security community.