CVE-2026-40702
CRITICAL
NVD
CVSS Score
9.4
Severity
CRITICAL
Published
Jun 25, 2026
Vendor
unknown
Description
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.