← volver
CVE-2026-20792

Chargemap chargemap.com Improper Restriction of Excessive Authentication Attempts

CVSS 8.7 HIGHEPSS 0.5%CWE-307
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.7EPSS 0.5%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
26 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or misrouting legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
Chargemap · chargemap.com

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →