Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 4 | Disclosure4 |
| 2026-03-11 | 1 | General1 |
| 2026-05-10 | 3 | Disclosure1General2 |
CVE-2026-22552 WebSocket Authentication Bypass in OCPP Charging Station Management System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22552
Post summary
A new vulnerability, CVE-2026-22552, is disclosed as a WebSocket authentication bypass in an OCPP charging station management system, with a link provided for further details.
https://lyrie.ai/research/research/cve-2026-22552-epower-epower-ie #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet merely links to a resource about CVE-2026-22552 without providing any specific technical or actionable details.
CVSS 9.4 CRITICAL · CVE-2026-22552 · 9.4 → 3.1 CVE: CVE-2026-22552 CVSS: 9.4 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Severity: CRITICAL Status: Critical advisory
Post summary
The post provides basic CVE information with a critical CVSS score and detailed vector, but lacks any PoC, exploit details, active exploitation claim, or mitigation guidance.
CVE: CVE-2026-22552 CVSS: 9.4 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Severity: CRITICAL Status: Critical advisory WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate…
Post summary
The snippet announces CVE‑2026‑22552, a critical WebSocket authentication flaw that could allow station impersonation and data manipulation.
CVE-2026-22552 (CVSS:9.3, CRITICAL) is Awaiting Analysis. WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonat..https://nvd.nist.gov/vuln/detail/CVE-2026-22552 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2026‑22552 with a critical CVSS score and a lack of authentication on WebSocket endpoints, but provides no PoC, exploit, active exploitation, or patch information.
CVE-2026-22552 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. A… https://www.cve.org/CVERecord?id=CVE-2026-22552
Post summary
The text announces a newly reported vulnerability (CVE-2026-22552) affecting WebSocket endpoints by exposing authentication flaws that enable impersonation and data manipulation, but it does not mention any exploit code, active attacks, or fixes.
🔴 CVE-2026-22552 - Critical WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated att... https://www.thehackerwire.com/vulnerability/CVE-2026-22552/ https://t.co/KLpONstQS0
Post summary
The post announces CVE‑2026‑22552 as a critical vulnerability in WebSocket endpoints lacking authentication, enabling impersonation and data manipulation; no exploit code, patch, or active exploitation is reported.
[CVE-2026-22552: CRITICAL] WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthentica...#cve,CVE-2026-22552,#cybersecurity https://cvefind.com/CVE-2026-22552
Post summary
The post highlights a critical authentication flaw in WebSocket endpoints that could allow impersonation and data manipulation, but provides no proof of concept, exploit code, evidence of active exploitation, or patch updates.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | epower | epower.ie | - | - | - |