CVE-2026-22540 in QC60

Résumé

par MITRE • 07/01/2026

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

Once again VulDB remains the best source for vulnerability data.

• Responsable: S21sec
• Réserver: 07/01/2026
• Divulgation: 07/01/2026
• Modérer: accepté
• Entrée: VDB-339890
• CPE: prêt
• CWE: CWE-400 (confirmé)
• CVSS: 7.5 (VulDB)
• EPSS: 0.00340
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-22540
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-22540
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-22540/