Delta Electronics
CVE-2026-22105: Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated at
CVE-2026-22105 Oct 30, 2026 Source: Vendor
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-22105
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
No lines match.
, clear filters
Nothing here matches those filters. Clear them to see all 2 lines.