CVE-2026-9274 | CP Plus CP-E38Q UART Interface cleartext storage (CIVN-2026-0266)

A vulnerability was found in CP Plus CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q and CP-Z45Q. It has been classified as problematic. This vulnerability affects unknown code of the component UART Interface. The manipulation leads to cleartext storage of sensitive information.

This vulnerability is traded as CVE-2026-9274. It is possible to launch the attack on the physical device. There is no exploit available.