CVE-2026-25774

Medium CVSS: 6.9

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Vendor

Product

CWE

Yayın Tarihi

2026-02-27 01:16:20

Güncelleme

2026-03-05 21:16:16

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

CWE-522 Ev.energy MEDIUM Ev.energy 2026

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-07.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07 https://www.ev.energy/en-us

Medium

CVE-2026-26290

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to…

High

CVE-2026-24445

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen…

Critical

CVE-2026-27772

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona…