CVE-2026-22100

Comnand injection in OCPP ReserveLogin message PUBLISHED

Description (CNA)

The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.

Affected (CNA)

Vendor / product	Versions
EVbee / DC-80	affected 0 before 1.5.1

CWE

CWE-78

References

https://csirt.divd.nl/DIVD-2026-00001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.