CVE-2026-22552

CVE-2026-22552 is a critical vulnerability affecting WebSocket endpoints in unspecified products, where a lack of proper authentication allows unauthenticated attackers to impersonate charging stations. This enables unauthorized control of charging infrastructure, data manipulation, and potential privilege escalation. With a CVSS score of 9.4 (Critical), it presents a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality and integrity. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential future exploitation.