CVE-2026-22094

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network.

  • Published Sep 29, 2026
  • CVSS 9.3 critical
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-22094 at the National Vulnerability Database