CVE-2026-20791

Medium CVSS: 6.9

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Vendor

Product

CWE

Yayın Tarihi

2026-02-27 00:16:56

Güncelleme

2026-03-05 20:16:12

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

CWE-522 Chargemap.com MEDIUM Chargemap 2026

https://chargemap.com/en-us/support https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-05.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05

Medium

CVE-2026-25711

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to…

Critical

CVE-2026-25851

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona…

High

CVE-2026-20792

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen…