Web-based Mapping Platform Vulnerability Affecting Charging Station Authentication
CVE-2026-20791

6.9MEDIUM

Key Information:

Vendor

Chargemap

Status
Chargemap.com
Vendor
CVE Published:
26 February 2026

What is CVE-2026-20791?

The vulnerability allows unauthenticated users to access the authentication identifiers of charging stations through web-based mapping platforms. This exposure can lead to unauthorized access and manipulation of charging station functionalities. Users should remain vigilant and ensure that adequate security practices are in place to protect sensitive information from being publicly accessible.

Affected Version(s)

chargemap.com All versions

References

https://chargemap.com/en-us/support
https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA
.