PT-2026-57673 · Evbee · Dc-80

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-22097

NVD

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2026-22097

Affected Products

Dc-80

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-22097 · Security Note
• https://csirt.divd.nl/DIVD-2026-00001 · Note