The EVbee DC-80 device contains an improper input validation vulnerability (CWE-20) identified as CVE-2026-22102. A specially crafted POST request to a particular webserver endpoint can exploit the lack of verification on the filename parameter in the Content-Disposition header, enabling an attacker to write files to arbitrary locations on the system. This can be leveraged to overwrite critical system files causing denial of service or to overwrite executable shell scripts, potentially enabling remote code execution through other means.

Successful exploitation allows an unauthenticated attacker to overwrite arbitrary files on the affected system. This can result in denial of service by corrupting system files or enable remote code execution by replacing shell scripts that may be executed later. The vulnerability has a CVSS 4.0 score of 9.3, indicating a critical severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable endpoint and monitor for suspicious POST requests attempting to exploit the filename parameter. Avoid exposing the affected webserver endpoint to untrusted networks.