CVE-2026-22100: Evbee DC-80

High severity, CVSS 8.6. EPSS: 1.1% chance of exploitation in the next 30 days.

The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.

Affected products

• Evbee DC-80: before 1.5.1 (fixed in 1.5.1)

Published 2026-07-13. Last modified 2026-07-13.