CVE Catalog
CVE-2026-20744
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.52%
41th percentile - higher than 41% of all known CVEs
Summary
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.
Risk Assessment
An attacker could gain unauthorized access to administrative functions of the charging station, potentially taking control and disrupting the charging infrastructure.
Recommendation
Immediately implement authentication for WebSocket connections, e.g., via session tokens or client certificates, and update the charging station software to the latest version.
Original NVD description (English source)
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.