CVE-2026-27773

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-20791

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22890

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-25774

CVE-2026-25774 affects EV Energy ev.energy charging stations. Publicly accessible authentication identifiers via web-based mapping platforms expose credentials; no exploit details provided in the documents. Relevant advisories include CISA ICS-26-057-07 (see linked sources).

CVE-2026-25774 EV Energy ev.energy Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-27773

Technical details about CVE-2026-27773 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

PT-2026-22253

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

SWITCH EV security vulnerability

SWITCH EV is a electric vehicle charging facility management platform developed by the US company SWITCH. There is a security vulnerability in SWITCH EV, which stems from the fact that the identity verification identifiers of charging stations can be accessed publicly through a web-based mapping...

EV Energy security vulnerabilities

EV Energy is an electric vehicle charging software platform operated by the British company EV Energy. There is a security vulnerability within EV Energy, as the identity verification identifiers of charging stations can be accessed publicly through a web-based mapping platform...

CloudCharge security vulnerabilities

CloudCharge is a website of the Swedish company CloudCharge, which provides a platform for managing electric vehicle charging stations. CloudCharge has a security vulnerability, as the identity verification identifiers of charging stations can be accessed publicly through a web-based mapping...

CVE-2026-22890 EV2GO ev2go.io Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22890

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-22890 EV2GO ev2go.io Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-20791 Chargemap chargemap.com Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-20791 Chargemap chargemap.com Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-20791

Technical details for CVE-2026-20791 are not publicly available in the provided documents. No specifics on affected products, versions, root cause, or remediation are disclosed here. Monitor for updates from the connected sources.

PT-2026-22216

Name of the Vulnerable Software and Affected Versions Charging station software affected versions not specified Description Authentication identifiers for charging stations are publicly accessible through web-based mapping platforms. This exposure potentially allows unauthorized access or...

PT-2026-22239

Name of the Vulnerable Software and Affected Versions Charging station affected versions not specified Description Authentication identifiers for charging stations are publicly accessible through web-based mapping platforms. This exposure allows unauthorized access to potentially sensitive...

PT-2025-41779

Name of the Vulnerable Software and Affected Versions QGIS QWC2 versions prior to 2025.08.14 Description A Cross-Site Scripting issue exists in the attribute table functionality. This allows an authorized attacker to inject arbitrary JavaScript code into the page. Recommendations Update QGIS QWC2...

Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------- Maplab = 2.2.1 gszAppPath Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : Mufti Rizal a.k.a mbahngarso Date : March, 30t...