HIGH 8.7 NVD

CVE-2026-22110

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also se

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.

References

https://csirt.divd.nl/CVE-2026-22110
https://csirt.divd.nl/DIVD-2026-00012

Published: 2026-10-30 · Source: NVD · Feed updated: 2026-10-30

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-10-30 via NVD.

vulnfeed aggregates 17475 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.