Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 3 | Disclosure3 |
| 2026-03-21 | 2 | Disclosure1General1 |
| 2026-05-11 | 2 | General2 |
Unpopular opinion: The cybersecurity industry is selling you dashboards. CVE: CVE-2026-25192 CVSS: 9.4 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Severity: CRITICAL Status: Critical advisory
Post summary
The message notes a critical CVE-2026-25192 with its CVSS score and severity but contains no information on PoC, exploit code, active exploitation, patch, or false positive status.
https://lyrie.ai/research/research/cve-2026-25192-ctek-charge-portal #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post references CVE-2026-25192 with zero‑day tags but provides no specific details or actionable intelligence.
CVE-2026-25192 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. A… https://www.cve.org/CVERecord?id=CVE-2026-25192
Post summary
The message announces a New vulnerability in WebSocket endpoints that lack proper authentication, allowing attackers to impersonate stations and manipulate backend data.
CVE-2026-25192 WebSocket Authentication Bypass in OCPP Charging Station Management System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25192
Post summary
CVE‑2026‑25192 describes a WebSocket authentication bypass in OCPP charging station management systems; no PoC, exploit, patch, or active exploitation details are offered.
🔴 CVE-2026-25192 - Critical WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated att... https://www.thehackerwire.com/vulnerability/CVE-2026-25192/ https://t.co/SwHUHDJuff
Post summary
CVE‑2026‑25192 reveals that unprotected WebSocket endpoints allow attackers to impersonate stations and alter backend data. No PoC, exploit code, active exploitation, patch, or false‑positive remarks are provided.
[CVE-2026-25192: CRITICAL] Unprotected WebSocket endpoints pose a serious cyber threat, allowing unauthorized access and manipulation of data. Implement secure authentication to prevent such attacks.#cve,CVE-2026-25192,#cybersecurity https://cvefind.com/CVE-2026-25192
Post summary
The tweet announces CVE‑2026‑25192 as a critical flaw involving unprotected WebSocket endpoints, recommends secure authentication as a mitigation, but provides no PoC, exploit, or evidence of active exploitation.
🚨 CVE-2026-25192: CTEK Chargeport... OCPP WebSocket endpoints with zero auth = instant charging station takeover and backend poisoning at scale. #EVSec #OCPP #CriticalInfra. https://zerodaysignal.com/vulnerability/CVE-2026-25192 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The text announces CVE-2026-25192, detailing a zero‑auth vulnerability in OCPP WebSocket endpoints that allows instant takeover and backend poisoning. No exploit code, patch, or active exploitation evidence is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ctek | charge_portal | - | - | - |