Information Disclosure Vulnerability in Acrel Electrical Prepaid Cloud Platform
CVE-2026-5601

6.9MEDIUM

Key Information:

Vendor

Acrel Electrical

Status
Prepaid Cloud Platform
Vendor
CVE Published:
5 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-5601?

Acrel Electrical Prepaid Cloud Platform version 1.0 contains a vulnerability in the Backup File Handler component, specifically affecting the processing of a backup file located at /bin.rar. This vulnerability could allow unauthorized access to sensitive information, which can be exploited remotely. Despite evidence of the exploit being publicly available, there has been no response from Acrel regarding this critical security concern.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Prepaid Cloud Platform 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-5601 - Proof of Concept

References

https://vuldb.com/vuln/355393
vdb-entry
https://vuldb.com/vuln/355393/cti
signaturepermissions-required
https://vuldb.com/submit/784693
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

3108109544 (VulDB User)
VulDB CNA Team
JSON
.