CVE-2026-22110 | BDVDB-2026-397967 Detail
Delta ElectronicsDelta UFC500
Description#
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.