CISA warns of multiple vulnerabilities in ePower EV charging stations

#cybersecurity #infosec

Summary

CISA warns of multiple vulnerabilities in ePower charging stations, including a critical authentication bypass (CVE-2026-22552), that allow unauthenticated attackers to hijack EV infrastructure and disrupt services.

Take Action:

Make sure your ePower charging station is isolated from the internet and behind a firewall or VPN. Since the vendor has not released a patch that's your only defense until the vendor does something or you replace these systems.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines