CVE-2026-20792: Chargemap chargemap.com Improper Restriction of Excessive Authentication Attempts
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or misrouting legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20792?
CVE-2026-20792 has a severity rating that indicates a high potential for exploitation due to improper restriction of excessive authentication attempts.
How do I fix CVE-2026-20792?
To fix CVE-2026-20792, implement rate limiting on the authentication requests in the affected WebSocket API to prevent denial-of-service attacks.
What types of attacks can CVE-2026-20792 lead to?
CVE-2026-20792 can lead to denial-of-service attacks that may disrupt service availability for legitimate users.
Which software versions are affected by CVE-2026-20792?
CVE-2026-20792 affects all versions of Chargemap available at chargemap.com that do not implement proper rate limiting on authentication requests.
Is CVE-2026-20792 related to any specific protocols?
CVE-2026-20792 specifically relates to the WebSocket Application Programming Interface regarding authentication processes.