CVE-2026-22543: Efacec Qc 60/90/120

Medium severity, CVSS 6.9. EPSS: 0.2% chance of exploitation in the next 30 days.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials

Affected products

• Efacec Qc 60/90/120: version 8 only

Published 2026-01-07. Last modified 2026-06-17.