CVE-2026-40702

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description WebSocket endpoints lack proper authentication mechanisms, which allows attackers to impersonate charging stations. This flaw can be exploited to gain unauthorized access to sensitive data, perform unauthorized actions, and lead to privilege escalation, potentially compromising the security of the entire system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.