CVE-2026-50176 EVoke Systems CVE debrief

Who should care

Organizations using EVoke Systems Charging Station Management System, particularly those in industrial control systems and critical infrastructure sectors, should prioritize patching and implement compensating controls to mitigate potential denial-of-service and brute-force attacks. This includes reviewing system deployments, validating affected scope, and planning vendor-supported updates or mitigations through normal change control where exposure is confirmed. Security teams should track exceptions, retest remediated assets, and close the item only after evidence is documented. Additionally, affected operators and platforms should be assessed for vulnerability management and security team impact, ensuring that all relevant stakeholders are informed and involved in the remediation process. This may involve coordinating with industrial control systems and critical infrastructure sectors to ensure that appropriate measures are taken to protect against potential threats. Furthermore, organizations should consider implementing additional security measures, such as monitoring and detection systems, to identify and respond to potential security incidents. By taking these steps, organizations can help protect their systems and assets from potential security threats. It is also essential to review and update security policies and procedures to ensure that they are aligned with the latest security best practices and regulatory requirements. Overall, a comprehensive approach to security and vulnerability management is crucial to mitigating the risks associated with this vulnerability and ensuring the security and integrity of critical infrastructure sectors. Security teams should also consider conducting regular security assessments and penetration testing to identify and address potential vulnerabilities before they can be exploited. By prioritizing patching and implementing compensating controls, organizations can reduce the risk of denial-of-service and brute-force attacks and protect their systems and assets from potential security threats. The CVE record was published on 2026-06-25T05:00:00.000Z and has not been modified since then. The WebSocket Application The CV

Technical summary

The WebSocket Application Programming Interface in EVoke Systems Charging Station Management System lacks restrictions on the number of authentication requests, allowing potential denial-of-service and brute-force attacks. EVoke is working on mitigations, including rate limiting, connection restrictions, and security profile upgrades. Organizations should review system deployments, validate affected scope, and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Security teams should track exceptions, retest remediated assets, and close the item only after evidence is documented. Limited information available on affected scope and vendor remediation efforts.

Defensive priority

Organizations using EVoke Systems Charging Station Management System should prioritize patching and implement compensating controls to mitigate potential denial-of-service and brute-force attacks.

Recommended defensive actions

• Implement rate limiting on the WebSocket gateway layer to restrict excessive connection attempts from the same source and temporarily block abusive traffic patterns.
• Permit only a single active connection per charger ID and reject or terminate duplicate connections.
• Monitor session anomalies, including repeated connection attempts, unexpected IP address changes, and abnormal message patterns.
• Prioritize upgrades to enable Security Profiles 2 or 3 for supported devices.
• Implement additional server-side protections to mitigate spoofing risks for chargers limited to Security Profiles 0 or 1.

Evidence notes

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access. Limited information available on affected scope and vendor remediation efforts.

Official resources