CVE-2026-27028Disclosure(mobility46 / mobility46.se)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch mobility46 mobility46.se systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.

mobility46 CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://www.mobility46.se/en/contact-us

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mobility46.se

Threat summary

Patch or workaround signal is available
7 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 7 signals
Disclosure: 6 classified signals
Peaked 2d ago at 5 mentions (2026-02-27); latest day: 1
7 total mentions across 3 days

Affected systems

Vendors

mobility46

Products

mobility46.se

Deep dive

Activity timeline7 mentions / 3d

Signal classification2 categories

Disclosure

685.7%

Patch

114.3%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	5	Disclosure4Patch1
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1

Full discourse7 posts

OffSeq | Adversary Tactics for Cyber Resilience@offseq225d
Patch
🚨CRITICAL: CVE-2026-27028 in http://Mobility46.se lets attackers remotely impersonate EV charging stations via unauthenticated WebSocket endpoints. All versions at risk — mitigate by enforcing strong auth now! https://radar.offseq.com/threat/cve-2026-27028-cwe-306-in-mobility46-mobil... https://t.co/RrN9R4smWA
Post summary
CVE‑2026‑27028 permits attackers to impersonate EV charging stations through unauthenticated WebSocket endpoints; all versions are vulnerable, so administrators should immediately enforce strong authentication.
0001038
270 followersView on X
CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-27028 (CVSS:9.4, CRITICAL) is Analyzed. WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona..https://nvd.nist.gov/vuln/detail/CVE-2026-27028 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights CVE-2026-27028 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not mention any PoC, exploit, or patch.
0000021
173 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-27028 (CVSS:9.4, CRITICAL) is Analyzed. WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona..https://nvd.nist.gov/vuln/detail/CVE-2026-27028 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights CVE-2026-27028 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not provide a PoC, exploit, or patch information.
0000036
173 followersView on X
Infoflowcloud@infoflowcloud224d
Disclosure
🚨*CVE* CVE-2026-27028 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.… https://www.cve.org/CVERecord?id=CVE-2026-27028 ----- Traducción: CVE-2026-27028 Los… http://infoflow.cloud`
Post summary
The post announces CVE-2026-27028, detailing an authentication bypass in WebSocket endpoints that permits attackers to impersonate stations and modify backend data. No PoC, exploit, or patch information is provided.
0000024
55 followersView on X
CVE@CVEnew224d
Disclosure
CVE-2026-27028 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.… https://www.cve.org/CVERecord?id=CVE-2026-27028
Post summary
The post discloses that CVE‑2026‑27028 is a WebSocket authentication flaw allowing station impersonation and data manipulation, with no PoC, exploit code, or patch information provided.
00000175
56.6K followersView on X
CVETodo@CveTodo225d
Disclosure
**CVE-2026-27028** pertains to a critical security flaw in systems utilizing WebSocket endpoints for the Open Charge Point Protocol (OCPP). The core issue is the absence of proper authentication mechanisms on these WebSocket interfaces, allowing unauthenticated attackers to impersonate charging stations, send malicious commands, and manipulate data exchanged with the backend infrastructure. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #RemoteCodeExecution #PrivilegeEscalation #Apple https://cvetodo.com/cve/CVE-2026-27028
Post summary
The passage announces a critical authentication flaw in OCPP WebSocket endpoints that allows unauthenticated attackers to impersonate charging stations and issue malicious commands, without providing PoC, exploit, or patch details.
0000041
20 followersView on X
CVEFind.com@CveFindCom225d
Disclosure
[CVE-2026-27028: CRITICAL] Unauthenticated access to WebSocket endpoints could allow attackers to impersonate stations and manipulate data, risking privilege escalation and unauthorized control.#cve,CVE-2026-27028,#cybersecurity https://cvefind.com/CVE-2026-27028
Post summary
A critical CVE (2026‑27028) allows unauthenticated access to WebSocket endpoints, enabling attackers to impersonate stations, manipulate data, and potentially achieve privilege escalation and unauthorized control.
0000045
585 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mobility46	mobility46.se	-	-	-

Explore more

Back to dashboard mobility46 CVEs mobility46.se vulnerabilities

What researchers are saying

CVE-2026-27028

OffSeq | Adversary Tactics for Cyber Resilience[verified]@offseqPatch

CVE‑2026‑27028 permits attackers to impersonate EV charging stations through unauthenticated WebSocket endpoints; all versions are vulnerable, so administrators should immediately enforce strong authentication.

CVETodo[verified]@CveTodoDisclosure

The passage announces a critical authentication flaw in OCPP WebSocket endpoints that allows unauthenticated attackers to impersonate charging stations and issue malicious commands, without providing PoC, exploit, or patch details.

CRAC Learning - Tech@cracbotDisclosure

The post highlights CVE-2026-27028 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not mention any PoC, exploit, or patch.

CRAC Learning - Tech@cracbotDisclosure

The post highlights CVE-2026-27028 as a critical WebSocket authentication flaw that permits unauthorized station impersonation, but it does not provide a PoC, exploit, or patch information.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-27028, detailing an authentication bypass in WebSocket endpoints that permits attackers to impersonate stations and modify backend data. No PoC, exploit, or patch information is provided.

CVE@CVEnewDisclosure

The post discloses that CVE‑2026‑27028 is a WebSocket authentication flaw allowing station impersonation and data manipulation, with no PoC, exploit code, or patch information provided.

CVEFind.com@CveFindComDisclosure

A critical CVE (2026‑27028) allows unauthenticated access to WebSocket endpoints, enabling attackers to impersonate stations, manipulate data, and potentially achieve privilege escalation and unauthorized control.