CVE-2026-22539CWE-201

INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP)

Medium · published January 7, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-01-07T17:12Z
EPSS history
Timeline
  • 07 JAN 17:12Z
    INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP)
    cvelistv5