CVE-2026-27767

CVE-2026-27767 is a critical vulnerability affecting swtchenergy.com products, stemming from a lack of authentication on WebSocket endpoints. This allows unauthenticated attackers to impersonate charging stations using known identifiers, issue or receive OCPP commands, and manipulate data. With a CVSS score of 9.8 (Critical), the vulnerability has a low attack complexity and can lead to privilege escalation, unauthorized control of charging infrastructure, and data corruption. While there is no known active exploitation, exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.