Multiple Vulnerabilities in CloudCharge EV Platform, Including One Critical

#cybersecurity #infosec

Summary

CloudCharge's EV charging platform contains four vulnerabilities, including a critical authentication bypass (CVE-2026-20781), that allow attackers to impersonate charging stations and hijack sessions.

Take Action:

Treat your EV charging stations as high-risk entry points and disconnect them from the public internet immediately. Since the vendor hasn't provided a fix, your only real defense is to isolate these systems behind a VPN and very strict firewall rules

Read the full article on BeyondMachines

This article was originally published on BeyondMachines