CVE-2026-27028 - Vulnerability Analysis

Overview

OCPP WebSocket endpoints contain an authentication bypass caused by lack of proper authentication mechanisms, letting unauthenticated attackers impersonate stations and manipulate backend data, exploit requires no authentication.

Severity & Score

Impact

Unauthenticated attackers can control charging infrastructure, escalate privileges, and corrupt backend data, risking operational disruption and data integrity.

Mitigation

Implement proper authentication mechanisms on WebSocket endpoints to prevent unauthorized access.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-08.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08
• https://www.mobility46.se/en/contact-us

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner