Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 3 | Disclosure2General1 |
| 2026-03-07 | 1 | Disclosure1 |
| 2026-05-11 | 2 | General2 |
Unpopular opinion: The cybersecurity industry is selling you dashboards. CRITICAL: CVE-2026-26051 (CVSS 9.4) — mvm mobiliti http://e-mobi.hu
Post summary
The post merely references CVE-2026-26051 with its CVSS score and affected product, offering no clues about exploitation, patches, or PoC.
CVE-2026-26051 WebSocket Authentication Bypass in OCPP Charging Station Management System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26051
Post summary
The text only cites the CVE identifier and a short title, lacking any further details about the vulnerability, exploit, patch, or active use.
[CVE-2026-26051: CRITICAL] Ensure proper authentication on WebSocket endpoints to prevent unauthorized access and manipulation of data. Lack of authentication can lead to privilege escalation and compromised...#cve,CVE-2026-26051,#cybersecurity https://cvefind.com/CVE-2026-26051
Post summary
The tweet announces CVE-2026-26051, highlighting a critical authentication flaw on WebSocket endpoints that could enable privilege escalation, but provides no PoC, exploit, patch, or active exploitation details.
https://lyrie.ai/research/research/cve-2026-26051-mvm-mobiliti-e-mobi-hu #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The text contains only a URL and tags, with no explicit information on the CVE's exploitation status, technical details, or mitigation.
🔴 CVE-2026-26051 - Critical WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated att... https://www.thehackerwire.com/vulnerability/CVE-2026-26051/ https://t.co/chefODi0Kv
Post summary
The post discloses a critical WebSocket authentication flaw allowing unauthorized station impersonation and data manipulation, but it does not provide a PoC, exploit code, or patch.
CVE-2026-26051 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. A… https://www.cve.org/CVERecord?id=CVE-2026-26051
Post summary
The text describes CVE-2026-26051, highlighting that WebSocket endpoints lack proper authentication, permitting attackers to impersonate stations and manipulate data sent to the backend, and refers to the CVE record on cve.org.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mvm | mobiliti_e-mobi.hu | - | - | - |