CVE-2026-22890

Medium CVSS: 6.9

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Vendor

Product

CWE

Yayın Tarihi

2026-02-27 00:16:56

Güncelleme

2026-03-05 21:16:14

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

CWE-522 Ev2go.io MEDIUM Ev2go 2026

https://ev2go.io/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-04.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04

High

CVE-2026-25945

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen…

Medium

CVE-2026-20895

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to…

Critical

CVE-2026-24731

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona…