Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
Charging Station Authentication Details Leaked on Public Maps
CVE-2026-20791
Summary
Public mapping platforms are exposing sensitive information about electric vehicle charging stations, including their authentication credentials. This can allow unauthorized access to charging stations. Take action to protect your charging station's security by ensuring that any mapping platforms used to display charging station locations do not expose sensitive authentication details.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| chargemap | chargemap.com | All versions | – |
Original title
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Original description
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
nvd CVSS3.1
7.5
nvd CVSS4.0
6.9
Vulnerability type
CWE-522
Insufficiently Protected Credentials
- https://chargemap.com/en-us/support Product
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-05... Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05 Third Party Advisory US Government Resource
Published: 27 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026