CVE-2026-22101— Sensitive information leak through hidden menu

Quick assessment

Copy summary Copy citation

Affected

EVbee DC-80

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password.

CVE-2026-22101 affects EVbee DC-80. No confirmed in-the-wild exploitation; assess based on exposure. The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi networ CVE-2026-22101 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-22101

I. Basic Information for CVE-2026-22101

Affected Products

II. Public POCs for CVE-2026-22101

III. Intelligence Information for CVE-2026-22101

Vendor Advisories for CVE-2026-22101 (1)

• 🔗 DIVD-2026-00001 - DIVD-2026-00001 – EVbee Service App and DC Quick Charging Station | DIVD CSIRT Read full article third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-22101

IV. Related Vulnerabilities

V. Comments for CVE-2026-22101