VULNERABILITY INTELLIGENCE
CVE-2026-22100
EPSS probability1.10%
CISA KEVNot currently listed
Published2026-07-13
Last modified2026-10-24
Description
The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
Weakness classification
- csirt@divd.nl: CWE-78