Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
Electric Vehicle Charging Station Login Info Exposed Through Online Maps
CVE-2026-27773
Summary
Electrify America and other charging station networks may have exposed login credentials and location data for their charging stations on public online maps. This could allow unauthorized access to charging stations, potentially disrupting operations or allowing malicious activity. To protect your network, ensure that sensitive information is not shared with public mapping platforms.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| swtchenergy | swtchenergy.com | All versions | – |
Original title
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Original description
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
nvd CVSS3.1
5.3
nvd CVSS4.0
6.9
Vulnerability type
CWE-522
Insufficiently Protected Credentials
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-05... Third Party Advisory
- https://swtchenergy.com/contact/ Product
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06 Third Party Advisory US Government Resource
Published: 27 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026