The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.CreditsWilco van Beijnum (ElaadNL)Jeroen van der Ham-de Vos (DIVD)Referenceshttps://csirt.divd.nl/DIVD-2026-00001/