CVE-2026-22097

Missing firmware validation allows remote code execution PUBLISHED

Description (CNA)

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
EVbee / DC-80	affected 0 before 1.5.1

CWE

CWE-347

References

https://csirt.divd.nl/DIVD-2026-00001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.