CVE-2026-24731Disclosure(ev2go / ev2go.io)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.

ev2go CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://ev2go.io/

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ev2go.io

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 6 classified signals
Peaked 2d ago at 4 mentions (2026-02-27); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

ev2go

Products

ev2go.io

Deep dive

Activity timeline6 mentions / 3d

Signal classification1 categories

Disclosure

6100.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	4	Disclosure4
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-24731 (CVSS:9.4, CRITICAL) is Analyzed. WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona..https://nvd.nist.gov/vuln/detail/CVE-2026-24731 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post reports CVE‑2026‑24731 as a critical WebSocket authentication flaw that permits attackers to impersonate stations, but it does not provide a PoC, exploit, or patch information.
0000020
173 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-24731 (CVSS:9.4, CRITICAL) is Analyzed. WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona..https://nvd.nist.gov/vuln/detail/CVE-2026-24731 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights CVE-2026-24731 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not provide a PoC, exploit, or patch information.
0000032
173 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-24731 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.… https://www.cve.org/CVERecord?id=CVE-2026-24731
Post summary
The CVE outlines that WebSocket endpoints lack proper authentication, enabling attackers to impersonate stations and manipulate data sent to the backend.
00000131
56.6K followersView on X
CVEFind.com@CveFindCom224d
Disclosure
[CVE-2026-24731: CRITICAL] Important: Unauthenticated access to WebSocket endpoints in OCPP protocol may lead to unauthorized control of charging stations and network data manipulation by attackers. #CyberSe...#cve,CVE-2026-24731,#cybersecurity https://cvefind.com/CVE-2026-24731
Post summary
The post announces a critical CVE (CVE-2026-24731) that allows unauthenticated attackers to control charging stations via WebSocket endpoints in the OCPP protocol, potentially manipulating network data.
0000046
585 followersView on X
CVETodo@CveTodo224d
Disclosure
**CVE-2026-24731** pertains to WebSocket endpoints used in charging station communication protocols, specifically the Open Charge Point Protocol (OCPP). The core issue is that these WebSocket endpoints lack proper authentication mechanisms, allowing attackers to connect without credentials. Once connected, attackers can impersonate legitimate charging stations, send malicious commands, or manipulate data exchanged with the backend system. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #RemoteCodeExecution #PrivilegeEscalation https://cvetodo.com/cve/CVE-2026-24731
Post summary
CVE-2026-24731 reveals that OCPP WebSocket endpoints allow unauthenticated access, permitting attackers to impersonate charging stations and send malicious commands.
0000039
20 followersView on X
OffSeq | Adversary Tactics for Cyber Resilience@offseq224d
Disclosure
🚨 CRITICAL: CVE-2026-24731 in EV2GO http://ev2go.io — all versions affected! Unauthenticated WebSocket access lets attackers control charging stations & corrupt data. Monitor network activity now. https://radar.offseq.com/threat/cve-2026-24731-cwe-306-in-ev2go-ev2goio-e42cb5b8 #OffSe... https://t.co/ketJztyJbQ
Post summary
The tweet announces CVE-2026-24731 as a critical vulnerability affecting all EV2GO versions, describing unauthenticated WebSocket access that lets attackers control charging stations and corrupt data, and urges monitoring of network activity.
0000036
270 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ev2go	ev2go.io	-	-	-

Explore more

Back to dashboard ev2go CVEs ev2go.io vulnerabilities

What researchers are saying

CVE-2026-24731

CVETodo[verified]@CveTodoDisclosure

CVE-2026-24731 reveals that OCPP WebSocket endpoints allow unauthenticated access, permitting attackers to impersonate charging stations and send malicious commands.

OffSeq | Adversary Tactics for Cyber Resilience[verified]@offseqDisclosure

The tweet announces CVE-2026-24731 as a critical vulnerability affecting all EV2GO versions, describing unauthenticated WebSocket access that lets attackers control charging stations and corrupt data, and urges monitoring of network activity.

CRAC Learning - Tech@cracbotDisclosure

The post reports CVE‑2026‑24731 as a critical WebSocket authentication flaw that permits attackers to impersonate stations, but it does not provide a PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post highlights CVE-2026-24731 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not provide a PoC, exploit, or patch information.

CVE@CVEnewDisclosure

The CVE outlines that WebSocket endpoints lack proper authentication, enabling attackers to impersonate stations and manipulate data sent to the backend.

CVEFind.com@CveFindComDisclosure

The post announces a critical CVE (CVE-2026-24731) that allows unauthenticated attackers to control charging stations via WebSocket endpoints in the OCPP protocol, potentially manipulating network data.