Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-20744 EUVD-2026-43094GHSA-v4hh-p8gf-c722

Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control

Published Jul 10, 2026 · Updated Jul 14, 2026 · Assigned by icscert

Description

The charging station websocket endpoint accepts connections without
proper authentication, which could lead to privilege escalation.

Affected products

VendorProductAffectedFixed
Hydro-Québec Le Circuit Electrique charging station backend < June_2026 June_2026

Advisories 1

References