What is the CVSS score of CVE-2026-27652?

CVE-2026-27652 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Cloudcharge.Se are affected by CVE-2026-27652?

A vulnerability in the WebSocket backend allows unauthorized session hijacking through charging station identifier reuse, enabling attackers to intercept or manipulate active sessions without proper…

How to fix or mitigate CVE-2026-27652?

Within 24 hours: Inventory all systems running affected WebSocket backend versions and isolate charging station management networks from untrusted access. Within 7 days: Implement network segmentation to restrict WebSocket endpoint access and enable comprehensive logging of session identifiers and connection sources. Within 30 days: Coordinate with the vendor for patch availability; if unavailable, evaluate alternative backend solutions or implement a session validation proxy that enforces unique session-to-endpoint binding.

Cloudcharge.Se CVE-2026-27652

HIGH

Insufficient Session Expiration (CWE-613)

2026-02-27 ics-cert@hq.dhs.gov

Authentication Bypass Cloudcharge.Se

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 00:16 nvd

HIGH 7.3

DescriptionCVE.org

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent connection displaces the legitimate charging station and receives backend commands intended for that station. This vulnerability may allow unauthorized users to authenticate as other users or enable a malicious actor to cause a denial-of-service condition by overwhelming the backend with valid session requests.

AnalysisAI

Session hijacking in Cloudcharge.Se's WebSocket backend allows remote attackers to impersonate legitimate charging stations by exploiting predictable session identifiers and the acceptance of duplicate connections, enabling command interception and station displacement. An attacker can authenticate as other users or trigger denial-of-service conditions by flooding the backend with valid session requests. No patch is currently available.

Technical ContextAI

Classified as CWE-613 (Insufficient Session Expiration). Affects Cloudcharge.Se. The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent connection displaces the legitimate charging station and receives backend commands intended for that station. This vulnerability may allow unauthorized users to authenticate as other users or enable a