MEDIUM

CVE-2026-44622

2026-06-25 CVSS v3.1

CVSS

6.5

Description

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Summary dbcve.org

Electric vehicle charging station authentication credentials (identifiers, keys, tokens) are inadvertently published on publicly accessible web-based mapping platforms (e.g., Google Maps, OpenStreetMap). This exposure allows unauthorized parties to discover and potentially use these credentials to access or manipulate charging stations.

Mitigation

Immediately rotate all exposed authentication identifiers and implement proper credential management to prevent future exposure. Review and restrict access to sensitive charging station configuration data on mapping platforms.

Weakness (CWE)

CWE-522 Insufficiently Protected Credentials

EPSS Score

0.42%

Probability of exploitation in next 30 days

36.2th percentile

References

https://evokesystems.com/contact-us/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-02.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE