CVE-2026-22097
Missing firmware validation allows remote code execution
CVSS Score
0.0
EPSS Score
0.3%
EPSS Percentile
19th
The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.
| CWE | CWE-347 |
| Vendor | evbee |
| Product | dc-80 |
| Published | Jul 13, 2026 |
| Last Updated | Jul 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for evbee dc-80
Be the first to know when new unknown vulnerabilities affecting evbee dc-80 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
EVbee / DC-80
0 < 1.5.1
Credits
Wilco van Beijnum (ElaadNL) Jeroen van der Ham-de Vos (DIVD)