Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-22099

Missing authentication for Bluetooth communication

Description

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EVbee DC-80

Default version status: unaffected

  • 0 to < 1.5.4affected

References