Skip to main content

Evbee DC-80 EUVDEUVD-2026-43329

| CVE-2026-22102 CRITICAL
Improper Input Validation (CWE-20)
2026-07-13 DIVD
Denial Of Service Dc 80
9.3
CVSS 4.0 · Vendor: DIVD
Share

Severity by source

Vendor (DIVD) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.8 CRITICAL

Unauthenticated network POST with no user interaction (AV:N/AC:L/PR:N/UI:N); arbitrary file write yields RCE and DoS, giving full C:H/I:H/A:H with no scope change.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (DIVD).

CVSS VectorVendor: DIVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Patch available
Jul 13, 2026 - 12:01 EUVD
Analysis Generated
Jul 13, 2026 - 11:09 vuln.today
CVE Published
Jul 13, 2026 - 09:10 cve.org
CRITICAL 9.3

DescriptionCVE.org

A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwriting system files, or remote-code-execution by overwriting shell-scripts which execution can be triggered through other means.

AnalysisAI

Arbitrary file write in the Evbee DC-80 EV charging station lets remote unauthenticated attackers overwrite any file on the device by sending a POST request whose Content-Disposition filename parameter is trusted without validation. Because a written file can clobber system files (denial of service) or replace shell scripts that are later executed, this escalates to remote code execution. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach charger webserver over network
Delivery
Send POST with malicious Content-Disposition filename
Exploit
Server writes file to arbitrary path
Execution
Overwrite boot/service shell script
Persist
Wait for script execution trigger
Impact
Execute code or disable device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions - remote unauthenticated exploitation against default configurations of the Evbee DC-80, requiring only network reachability to the webserver and the ability to send a POST request with an attacker-controlled Content-Disposition filename header. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment All available signals point to genuinely high risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with network reachability to the charger sends a single crafted POST request to the vulnerable endpoint with a Content-Disposition filename such as a path pointing at a boot or service shell script, and the server writes attacker-controlled content there. When that script is next executed by the device's normal operation, the attacker's code runs; alternatively the attacker overwrites a critical system file to knock the charger offline. …
Remediation No vendor-released patch identified at time of analysis; the only reference is the DIVD advisory (https://csirt.divd.nl/DIVD-2026-00001/), so monitor it and the Evbee vendor for a firmware update and apply the fixed version once released. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: inventory all Evbee DC-80 devices and immediately isolate them on a dedicated network segment with restricted outbound access. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Dc 80

View all
CVE-2026-22103 CRITICAL
9.3 Jul 13

Command injection in the evbee DC-80 EV charger allows remote unauthenticated attackers to execute arbitrary operating-s
CVE-2026-22097 CRITICAL
9.3 Jul 13

Arbitrary code execution in the EVBEE DC-80 EV charging station stems from a firmware update mechanism that ships withou
CVE-2026-22096 CRITICAL
9.3 Jul 13

Missing authentication on the evbee DC-80 EV charging station exposes an administrative web server on TCP port 8090 that
CVE-2026-22095 CRITICAL
9.3 Jul 13

Remote code execution in the evbee DC-80 EV charging station is possible through a command injection flaw in the network
CVE-2026-22098 CRITICAL
9.2 Jul 13

Sensitive-data logging in the Evbee DC-80 DC EV charger writes secrets such as user passwords and charging card (RFID) U
CVE-2026-22099 HIGH
8.7 Jul 13

Bluetooth authentication bypass in the Evbee DC-80 DC EV charging station lets an attacker within radio range issue priv
CVE-2026-22100 HIGH
8.6 Jul 13

OS command injection in the EVBEE DC-80 electric-vehicle DC charger lets an actor who can send OCPP messages execute arb

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

EUVD-2026-43329 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy