NVD security advisoryHigh
High advisory for Delta UFC500 charging stations derive th
CVE-2026-22105 · Reported 30 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Delta UFC500 charging stations derive thAffected product
Advisory overview
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.