SAST findings vary widely across 12 OCPP 1.6 language ports
SonarQube, Semgrep, and language-specific analyzers reported two issues in Rust and 1,689 in Java.
7 stories, newest first · one card per story
SonarQube, Semgrep, and language-specific analyzers reported two issues in Rust and 1,689 in Java.
Runs against open- and closed-source chargers found several flaws and led to two published CVEs.
CS-SHIELD shuffles charger virtual IPs to keep SDN EV sites available under low-rate flow-table DoS.

Automotive vulnerabilities jumped to 345 in Q2 2026, with shared cloud and supplier flaws widening fleet exposure.
Position paper proposes hierarchical software quality assurance to characterize and secure EV charging station software attack surfaces.
A public proof-of-concept denial-of-service exploit has been published for the EVerest 2025.9.0 open-source EV charging framework.

Researchers showed malicious SIM cards can issue RUN AT commands to execute code on Qualcomm modems, compromising Quectel-based cellular IoT devices like EV chargers.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views