Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is weakly encrypted using RC4 with a hardcoded key, which allows an attacker to gain access to the communication. Part of this communication involves access codes to charging stations. This issue affects EVbee Service: v1.4.101.00.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
【緊急】CVE-2026-22093 EVbee Service v1.4.101.00に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/18/cve-2026-22093-evbee-service-v1410100/ #IT #Security #cybersecurity
Post summary
An emergency advisory has been issued highlighting a severe vulnerability in EVbee Service v1.4.101.00, urging immediate action.