Skip to content
OpenAdvisories
High · 7.5 CVE-2026-20792 EUVD-2026-8931GHSA-m9p8-mq88-4q4g

Chargemap chargemap.com Improper Restriction of Excessive Authentication Attempts

Published Feb 26, 2026 · Updated Mar 5, 2026 · Assigned by icscert

Description

The WebSocket Application Programming Interface lacks restrictions on
the number of authentication requests. This absence of rate limiting may
allow an attacker to conduct denial-of-service attacks by suppressing
or misrouting legitimate charger telemetry, or conduct brute-force
attacks to gain unauthorized access.

Affected products

VendorProductAffectedFixed
Chargemap chargemap.com All versions —

Advisories 1

References