Switch Ev - vulnerabilities (CVEs)
4 CVEs in 1 products, 0 in the last 30 days, newest from 2026-02-27.
Products
- Swtchenergy.com - 4 CVEs
Newest CVEs of Switch Ev
- CVE-2026-27773 - CVSS 6.9 (medium), 2026-02-27: Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
- CVE-2026-27767 - CVSS 9.8 (critical), 2026-02-27: WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the…
- CVE-2026-25778 - CVSS 7.5 (high), 2026-02-27: The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session…
- CVE-2026-25113 - CVSS 9.8 (critical), 2026-02-27: The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an…