Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-22095 EUVD-2026-43326GHSA-644p-7q3w-636g

Command injection in diagnosis web endpoint

Published Jul 13, 2026 · Updated Jul 16, 2026 · Assigned by DIVD

Vendor: EVbee Product: DC 80

Description

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection.

Affected products

VendorProductAffectedFixed
EVbee DC-80 < 1.5.1 1.5.1

References