CVE-2026-44100CWE-306

JupiCore charging point reconfiguration without auth

High · published July 30, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00499 · 41.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-07-30T06:50Z
EPSS history
Timeline
  • 30 JUL 06:50Z
    JupiCore charging point reconfiguration without auth
    cvelistv5