TI-2026-16779 CVE-2026-20733 · GHSA-576v-vjm2-9m8r
CloudCharge cloudcharge.se Insufficiently Protected Credentials
Priority LOW 36
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Vulnerabilities
4 records
TI-2026-22034 CVE-2026-27652 · GHSA-xc6x-6xp8-3frw
CloudCharge cloudcharge.se Insufficient Session Expiration
Priority LOW 36
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.
TI-2026-20277 CVE-2026-25114 · GHSA-2xph-9rqm-66cr
CloudCharge cloudcharge.se Improper Restriction of Excessive Authentication Attempts
Priority MEDIUM 44
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.
TI-2026-16819 CVE-2026-20781 · GHSA-926q-p427-pgcj
CloudCharge cloudcharge.se Missing Authentication for Critical Function
Priority MEDIUM 49
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.