Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
Electric Vehicle Charging Station Credentials Exposed Online
CVE-2026-22878
Summary
If your electric vehicle uses a charging station with a connected smartphone app, hackers might be able to find your charging station's login details online. This could allow them to access and use your charging sessions without your permission. You should check if your charging station's app allows you to change the authentication settings to be more secure.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| mobility46 | mobility46.se | All versions | – |
Original title
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Original description
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
nvd CVSS3.1
5.3
nvd CVSS4.0
6.9
Vulnerability type
CWE-522
Insufficiently Protected Credentials
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-05... Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08 Third Party Advisory US Government Resource
- https://www.mobility46.se/en/contact-us Product
Published: 27 Feb 2026 · Updated: 14 Mar 2026 · First seen: 6 Mar 2026