CVE-2026-22099

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.

Score

CVSS 4.0 8.7 High

Status

Deferred - csirt@divd.nl

Published

2026-07-13

Last modified

2026-10-24

Weaknesses

CWE-287

Affected products

• Dc-80 (Evbee)

References

• https://csirt.divd.nl/DIVD-2026-00001/