Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-22100

Comnand injection in OCPP ReserveLogin message

Description

The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EVbee DC-80

Default version status: unaffected

  • 0 to < 1.5.1affected

References