CVE-2026-20733

CVE-2026-20733 describes a vulnerability in CloudCharge's cloudcharge.se platform where charging station authentication identifiers are publicly exposed through web-based mapping platforms. This medium-severity vulnerability (CVSS 5.3) has a low attack complexity and requires no user interaction, allowing an unauthenticated attacker to gain access to sensitive information (CWE-522). While the potential impact is limited to confidentiality, there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog. Despite low EPSS and FAUCET scores, the vulnerability has garnered some community discussion and media coverage.