EVbee
EVbee Security Releases - September 2026
evbee-2026-09 Sep 1, 2026 Source: Vendor
EVbee security advisories for September 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-22094
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4 matching , clear filters
CVE-2026-22094
BR2026-0000-039702
DC 80
unclaimed
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network.
Credited as Wilco van Beijnum (ElaadNL)
CVE-2026-22094
BR2026-0000-039703
DC 80
unclaimed
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network.
Credited as Jeroen van der Ham-de Vos (DIVD)
CVE-2026-22101
BR2026-0000-039704
DC-80
unclaimed
The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password.
Credited as Wilco van Beijnum (ElaadNL)
CVE-2026-22101
BR2026-0000-039705
DC-80
unclaimed
The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password.
Credited as Jeroen van der Ham-de Vos (DIVD)