CVE-2026-25113 in swtchenergyinfo

Zusammenfassung

von MITRE • 27.02.2026

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

Icscert

Reservieren

24.02.2026

Veröffentlichung

27.02.2026

Moderieren

akzeptiert

Eintrag

VDB-348079

CPE

bereit

EPSS

0.00105

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!