Everon API CVE-2026-24696

Organizations using Everon's api.everon.io WebSocket API should immediately consult CISA advisory ICSA-26-062-08 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08) and the CSAF document (https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-08.json) for vendor-issued patches or service updates, as no specific fix version is independently confirmed in available data. Until patches are deployed, implement compensating controls including: restricting network access to the WebSocket endpoint using IP allowlisting to permit only known charging station source addresses and authorized management workstations, which reduces exposure but requires maintaining accurate IP inventories and may complicate mobile management scenarios; deploying a reverse proxy or web application firewall with aggressive rate limiting rules (e.g., maximum 5 authentication attempts per source IP per minute) to throttle brute-force attempts, though this may inadvertently block legitimate retry logic from charging stations experiencing intermittent connectivity; enabling comprehensive authentication logging and alerting on failed login patterns to detect ongoing attacks, accepting the operational overhead of log analysis; and implementing network-layer DDoS mitigation services from cloud providers or CDN services positioned in front of the API, which adds infrastructure cost but provides broader protection. Organizations should also audit account credentials to ensure strong, unique passwords resistant to dictionary attacks and enable multi-factor authentication if supported by future Everon updates.