CVE-2026-22100

HighCVSS 8.6

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

60th percentile - higher than 60% of all known CVEs

Summary

The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. Manipulating the data value allows arbitrary OS commands to be executed as root.

Risk Assessment

An attacker can remotely take control of the system by executing arbitrary commands as root, leading to full device compromise and potential lateral movement within the network.

Recommendation

Immediately update the OCPP implementation to a version that fixes the command injection vulnerability. In the meantime, restrict trusted sources for DataTransfer messages.

Other vulnerabilities in OCPP

CVE-2026-44383High
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

Original NVD description (English source)

The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.