Skip to content
OpenAdvisories

Vendor

EVbee

11 known vulnerabilities.

Products

DC 80 10 EVbee Service 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-22099

    Missing authentication for Bluetooth communication

    The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.

    EVbee DC 80
  • High 8.6
    CVE-2026-22100

    Comnand injection in OCPP ReserveLogin message

    The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.

    EVbee DC 80