https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:14:24.988098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22102 CVE-2026-22102 — Arbitrary file overwrite through certificate update functionality 2026-10-10T12:14:25.004762+00:00

Affected: EVbee DC-80

A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwriting system files, or remote-code-execution by overwriting shell-scripts which execution can be triggered through other means.