Mobility46 mobility46.se
Mobility46 charging station platform contains four critical vulnerabilities affecting all versions, including missing WebSocket authentication, lack of rate limiting, insufficient session management, and exposed credentials via public mapping platforms. These flaws enable attackers to gain unauthorized administrative control over electric vehicle charging infrastructure worldwide, with potential for denial-of-service attacks and charging network disruption. The vendor has not responded to CISA coordination requests.
Summary
Mobility46 charging station platform contains four critical vulnerabilities affecting all versions, including missing WebSocket authentication, lack of rate limiting, insufficient session management, and exposed credentials via public mapping platforms. These flaws enable attackers to gain unauthorized administrative control over electric vehicle charging infrastructure worldwide, with potential for denial-of-service attacks and charging network disruption. The vendor has not responded to CISA coordination requests.
Indicators of Compromise
- cve — CVE-2026-27028
- cve — CVE-2026-26305
- cve — CVE-2026-27647
- cve — CVE-2026-22878