CVE-2026-22540
The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.2
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
- EPSS probability
- 0.36%
- CWE
- CWE-400
- Published
- 2026-01-07
- Last modified
- 2026-03-12
Affected products
- EFACEC QC60/90/120
Weakness type
Related vulnerabilities
- CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
- CVE-2026-86204 — PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket
- CVE-2026-86201 — PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData
- CVE-2025-71418 — PocketMine-MP before 5.25.2 Denial of Service via explode
- CVE-2026-53937 — MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
- CVE-2026-82001 — Acrobat Reader | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-76000 — ColdFusion | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-83968 — Windows Biometric Service Elevation of Privilege Vulnerability