VYPR
Unrated severityNVD Advisory· Published Feb 26, 2026· Updated Mar 5, 2026

CloudCharge cloudcharge.se Improper Restriction of Excessive Authentication Attempts

CVE-2026-25114

Description

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • CloudCharge/cloudcharge.sev5
    Range: All versions

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.