Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 3 | Disclosure3 |
| 2026-03-21 | 2 | Disclosure1General1 |
CVE-2026-29796 WebSocket Authentication Bypass in OCPP Charging Station Management System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29796
Post summary
The provided text identifies CVE-2026-29796 as a WebSocket authentication bypass in an OCPP charging station management system, but offers no proof of exploitation, PoC, or mitigation details.
[CVE-2026-29796: CRITICAL] Weak security in WebSocket endpoints allows unauthorized users to impersonate stations, manipulate data, and gain unauthorized control, leading to potential privilege escalation an...#cve,CVE-2026-29796,#cybersecurity https://cvefind.com/CVE-2026-29796
Post summary
The post discloses a critical WebSocket endpoint vulnerability that enables impersonation, data manipulation, and potential privilege escalation.
CVE-2026-29796 WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. A… https://www.cve.org/CVERecord?id=CVE-2026-29796
Post summary
CVE-2026-29796 describes unauthenticated WebSocket endpoints that allow attackers to impersonate stations and alter data, with no available exploit, patch, or evidence of active exploitation.
🔴 CVE-2026-29796 - Critical WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated att... https://www.thehackerwire.com/vulnerability/CVE-2026-29796/ https://t.co/ev2AMapCVb
Post summary
CVE-2026-29796 is a critical flaw in WebSocket authentication that allows unauthenticated attackers to impersonate stations and manipulate backend data; no PoC or active exploitation evidence is provided.
🚨 CVE-2026-29796: IG... OCPP WebSocket endpoints with zero auth = instant charging station takeover - every EV charger becomes your botnet node. #EVSec #OCPP #CriticalInfra. https://zerodaysignal.com/vulnerability/CVE-2026-29796 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A newly disclosed CVE-2026-29796 allows attackers to take over OCPP WebSocket endpoints without authentication, turning EV chargers into botnet nodes. While the vulnerability details are posted on zerodaysignal, no exploit tool or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | igl | eparking.fi | - | - | - |