EUVD-2026-8964

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

EUVD-2026-8948

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

EUVD-2026-8961

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

EUVD-2026-8959

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-27028

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

CVE-2026-25774

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-26290

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

CVE-2026-22878

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

EUVD-2026-8967

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

EUVD-2026-8937

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

EUVD-2026-8966

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

EUVD-2026-8930

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

EUVD-2026-8934

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

EUVD-2026-8933

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

EUVD-2026-8928

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22878

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22878 Mobility46 mobility46.se Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22878 Mobility46 mobility46.se Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22878

Technical details (affected product/component, root cause, impact, fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2026-27647

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...