CVE-2026-22539

INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP) PUBLISHED

Description (CNA)

As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6.

Affected (CNA)

Vendor / product	Versions
EFACEC / QC 60/90/120	affected 8

CWE

CWE-201

References

https://cds.thalesgroup.com/en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.