TI-2026-21500 CVE-2026-27027 · GHSA-6g26-9w6r-69r6
Everon api.everon.io Insufficiently Protected Credentials
Priority LOW 36
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Vulnerabilities
4 records
TI-2026-16791 CVE-2026-20748 · GHSA-35c6-2wx7-593f
Everon api.everon.io Insufficient Session Expiration
Priority LOW 36
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.
TI-2026-19917 CVE-2026-24696 · GHSA-9wcj-2q46-8j24
Everon api.everon.io Improper Restriction of Excessive Authentication Attempts
Priority MEDIUM 44
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.
TI-2026-21255 CVE-2026-26288 · GHSA-8c4p-92q7-6q8x
Everon api.everon.io Missing Authentication for Critical Function
Priority MEDIUM 49
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.