Swtchenergy Swtchenergy.com — known CVE vulnerabilities

Every CVE whose affected-product data names Swtchenergy Swtchenergy.com, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-27767 — CVSS 9.4 (critical): WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate…
• CVE-2026-25113 — CVSS 7.5 (high): The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting…
• CVE-2026-25778 — CVSS 7.3 (high): The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the…
• CVE-2026-27773 — CVSS 6.5 (medium): Charging station authentication identifiers are publicly accessible via web-based mapping platforms.