Exposed Charging Station Authentication Identifiers from ePower
CVE-2026-27770

6.9MEDIUM

Key Information:

Vendor

Epower

Status
Epower.ie
Vendor
CVE Published:
5 March 2026

What is CVE-2026-27770?

The security flaw allows unauthorized access to the authentication identifiers of ePower's charging stations through publicly available web-based mapping platforms. This exposure poses potential risks for malicious actors seeking to exploit system vulnerabilities, leading to unauthorized control or misuse of charging stations. It is crucial for users and administrators to fortify their cybersecurity measures to mitigate risks associated with this exposure.

Affected Version(s)

epower.ie All versions

References

https://epower.ie/support/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA.
.