Vendors / EVoke Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now EVoke records in CISA KEV No EVoke vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00646 · Published 2026-06-25 · No fix listed CWE-306
Priority MEDIUM 45
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00711 · Published 2026-06-25 · No fix listed CWE-307
Priority LOW 37
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0042 · Published 2026-06-25 · No fix listed CWE-613
Priority LOW 37
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-06-25 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs