CVE-2026-22099

Missing authentication for Bluetooth communication PUBLISHED

Description (CNA)

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.

Affected (CNA)

Vendor / product	Versions
EVbee / DC-80	affected 0 before 1.5.4

CWE

CWE-287

References

https://csirt.divd.nl/DIVD-2026-00001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.