EVbee Service vulnerabilities

Latest EVbee Service CVEs

Newest publication first

1. CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

   Published 2026-07-13

   Critical·CVSS 9.5 EPSS 0.26%

   The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and ser...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.