CVE-2025-26857
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639
Summary
CVE-2025-26857 is a newly identified vulnerability that allows unauthenticated attackers to rename devices belonging to any user, such as EV chargers. This issue can potentially lead to confusion and misidentification of devices, creating security and operational risks. Attackers can exploit this vulnerability without requiring any credentials or authorization from the affected system. Device renaming can impact the functionality and integrity of the affected devices, leading to operational disruptions or even safety concerns.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cloud Applications