What is the CVSS score of CVE-2026-31926?

CVE-2026-31926 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Eparking Fi are affected by CVE-2026-31926?

CVE-2026-31926 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments.

Eparking Fi CVE-2026-31926

EUVD-2026-13857 MEDIUM

Insufficiently Protected Credentials (CWE-522)

2026-03-20 icscert

Information Disclosure Eparking Fi

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 20, 2026 - 23:16 euvd

EUVD-2026-13857

Analysis Generated

Mar 20, 2026 - 23:16 vuln.today

CVE Published

Mar 20, 2026 - 23:06 nvd

MEDIUM 6.5

DescriptionCVE.org

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

AnalysisAI

A web-based mapping platform exposes charging station authentication identifiers publicly, allowing unauthenticated network-based attackers to access sensitive credential information without any user interaction required. The vulnerability affects IGL Technologies eparking.fi application and enables attackers to obtain authentication material that could be leveraged for unauthorized access to charging infrastructure. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	The CVSS 3.1 score of 6.5 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N reflects a moderate severity with notable concerning characteristics: the attack vector is network-based requiring no privileges or user interaction, and the attack complexity is low, meaning no special conditions are required for exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker discovers the eparking.fi web-based mapping platform and identifies that charging station authentication identifiers are publicly accessible without authentication (AV:N, PR:N, UI:N). The attacker methodically enumerates and extracts the exposed identifiers by parsing responses from the mapping interface or analyzing client-side code. …
Remediation	Coordinate with IGL Technologies to obtain and deploy the patched version of eparking.fi addressing the credential exposure; refer to the CISA advisory at https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08 for specific patched version numbers and deployment instructions. … Detailed patch versions, workarounds, and compensating controls in full report.