Skip to content
OpenAdvisories
High · 7.5 CVE-2026-24696 EUVD-2026-10033GHSA-9wcj-2q46-8j24

Everon api.everon.io Improper Restriction of Excessive Authentication Attempts

Published Mar 6, 2026 · Updated Mar 10, 2026 · Assigned by icscert

Description

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.

Affected products

VendorProductAffectedFixed
Everon api.everon.io All versions —

Advisories 1

References