The EVbee DC-80 device has a vulnerability identified as CVE-2026-22098, categorized under CWE-532, where sensitive data including passwords and charging card unique identifiers are logged in plaintext or otherwise insecurely. This logging behavior can lead to sensitive information disclosure if log files are accessed by unauthorized parties. The CVSS 4.0 base score is 9.2, indicating a critical severity with network attack vector, no required privileges or user interaction, and high confidentiality impact. No remediation level or patch information is currently available.

The vulnerability allows exposure of sensitive credentials and identifiers through log files, which can be accessed by attackers to compromise system security or user privacy. Since the vulnerability requires no privileges or user interaction and can be exploited remotely, it poses a significant risk to confidentiality. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to log files containing sensitive information and monitor for unauthorized access attempts. Avoid exposing logs to untrusted users or networks.