CVE-2026-22096

Missing authentication for webserver endpoints PUBLISHED

Description (CNA)

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints.

Affected (CNA)

Vendor / product	Versions
EVbee / DC-80	affected 0 before 1.5.1

CWE

CWE-306

References

https://csirt.divd.nl/DIVD-2026-00001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.