CVE-2026-22099highCWE-287

CVE-2026-22099: falha de alta gravidade em EVbee DC-80

Missing authentication for Bluetooth communication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DC-80

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.3%
The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
EVbee · DC-80
CVEs relacionadas — EVbee DC-80

No mesmo produto, das mais perigosas para as menos.

CVE-2026-22103CRITICALCommand injection in NPC start web endpointEPSS 1.4%CVE-2026-22095CRITICALCommand injection in diagnosis web endpointEPSS 1.4%CVE-2026-22100HIGHComnand injection in OCPP ReserveLogin messageEPSS 1.1%CVE-2026-22096CRITICALMissing authentication for webserver endpointsEPSS 0.5%CVE-2026-22102CRITICALArbitrary file overwrite through certificate update functionalityEPSS 0.5%CVE-2026-22098CRITICALSensitive information is written to logsEPSS 0.4%