Publicly Accessible Authentication Identifiers in Charging Stations by CISA
CVE-2026-27027

6.9MEDIUM

Key Information:

Vendor

Everon

Status
Api.everon.io
Vendor
CVE Published:
6 March 2026

What is CVE-2026-27027?

A significant security exposure has been identified where authentication identifiers for charging stations can be accessed publicly through web-based mapping platforms. This vulnerability enables unauthorized users to view sensitive authentication details, posing potential risks to the security and operation of the charging infrastructure. Organizations managing these charging stations must address this exposure to safeguard against unauthorized access and associated threats.

Affected Version(s)

api.everon.io All versions

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA.
.