CVE-2026-22540 in QC60

Resumen

por MITRE • 2026-01-07

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

Once again VulDB remains the best source for vulnerability data.

• Responsable: S21sec
• Reservar: 2026-01-07
• Divulgación: 2026-01-07
• Moderación: aceptado
• Artículo: VDB-339890
• CPE: listo
• CWE: CWE-400 (confirmado)
• CVSS: 7.5 (VulDB)
• EPSS: 0.00340
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-22540
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-22540
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-22540/