一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月3日

CVE-2026-95102 [CRITICAL] – WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersona

未分类
📑 文章目录

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.