Description
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EVbee | DC-80 | < 1.5.1 | 1.5.1 |
References
- https://csirt.divd.nl/DIVD-2026-00001/ third-party-advisory
Critical · 9.3
CVE-2026-22103
EUVD-2026-43333GHSA-6f5q-g982-5373
Command injection in NPC start web endpoint
Published Jul 13, 2026 · Updated Jul 16, 2026 · Assigned by DIVD