Description
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EVbee | DC-80 | < 1.5.1 | 1.5.1 |
References
- https://csirt.divd.nl/DIVD-2026-00001/ third-party-advisory