Delta Electronics

CVE-2026-22105: Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated at

CVE-2026-22105 Oct 30, 2026 Source: Vendor

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-22105

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines

Showing 1–2 of 2 matching , clear filters

CVE-2026-22105 BR2026-0000-039652 unclaimed

Credited as Wilco van Beijnum (Elaadnl)

CVE-2026-22105 BR2026-0000-039653 unclaimed

Credited as Victor Pasman (DIVD)