CVE-2026-25774

MEDIUM

ev.energy - Unprotected Credential Exposure via Web-Based Mapping Platforms

Title source: llm

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Core 3

Core References

Third Party Advisory

Third Party Advisory, US Government Resource

Various Sources

CVSS v3 6.5

EPSS 0.0028

EPSS Percentile 19.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-522

Status published

Products (2)

EV Energy/ev.energy All versions

ev.energy/ev.energy

Published Feb 27, 2026

Tracked Since Feb 27, 2026