Authentication Exposures in Cloud Charging Stations by CloudCharge
CVE-2026-20733

6.9MEDIUM

Key Information:

Vendor

Cloudcharge

Status
Cloudcharge.se
Vendor
CVE Published:
26 February 2026

What is CVE-2026-20733?

A vulnerability in CloudCharge's charging stations allows unauthorized access to authentication identifiers through public web-based mapping platforms. This exposure can lead to the potential manipulation or misuse of these identifiers, posing significant security risks for users and operators of the charging infrastructure. Organizations utilizing these stations should urgently assess their security measures and review access controls to mitigate possible threats.

Affected Version(s)

cloudcharge.se All versions

References

https://cloudcharge.tech/support/contact/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA.
.