Lucene search
+L

156 matches found

Positive Technologies
Positive Technologies
•added 2026/03/20 12:00 a.m.•21 views

PT-2026-26698

Name of the Vulnerable Software and Affected Versions WebSocket Application Programming Interface affected versions not specified Description The WebSocket Application Programming Interface does not restrict the number of authentication requests. This lack of rate limiting could enable an attacke...

8.7CVSS5.8AI score0.00785EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/03/07 7:31 p.m.•14 views

CVE-2026-24696

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/07 7:31 p.m.•16 views

CVE-2026-20882

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/07 1:44 a.m.•12 views

CVE-2026-27778

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00776EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/06 6:31 p.m.•20 views

EUVD-2026-10033

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00357EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/06 4:16 p.m.•23 views

CVE-2026-24696

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS0.00357EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/06 4:16 p.m.•20 views

CVE-2026-20882

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS0.00437EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/06 3:16 p.m.•10 views

CVE-2026-24696

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00357EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/06 3:16 p.m.•57 views

CVE-2026-24696

Technical details (affected products, versions, exploit information) are not publicly provided in the connected documents. Monitor for updates.

8.7CVSS5.8AI score0.00357EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/03/06 3:05 p.m.•48 views

CVE-2026-20882

CVE-2026-20882 affects the Mobiliti/e-mobi.hu implementation. The issue is the WebSocket API’s lack of rate limiting on authentication attempts, enabling potential denial-of-service via suppression/mis-routing of charger telemetry and possible brute-forcing to gain unauthorized access. Public con...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2026/03/06 3:05 p.m.•11 views

CVE-2026-20882

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/06 3:05 p.m.•47 views

CVE-2026-20882 Mobiliti e-mobi.hu Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS0.00437EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/06 3:05 p.m.•9 views

CVE-2026-20882 Mobiliti e-mobi.hu Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/06 12:16 a.m.•14 views

CVE-2026-27778

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS0.00776EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•25 views

PT-2026-23712

Name of the Vulnerable Software and Affected Versions WebSocket Application Programming Interface affected versions not specified Description The WebSocket Application Programming Interface does not restrict the number of authentication requests. This lack of rate limiting could enable an attacke...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/06 12:00 a.m.•1 views

CVE-2026-24696: Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.9AI score0.00357EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/06 12:00 a.m.•2 views

CVE-2026-20882: Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.9AI score0.00437EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/06 12:00 a.m.•0 views

CVE-2026-27778: Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

8.7CVSS5.9AI score0.00776EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•23 views

PT-2026-23713

Name of the Vulnerable Software and Affected Versions WebSocket Application Programming Interface affected versions not specified Description The WebSocket Application Programming Interface does not restrict the number of authentication requests. This lack of rate limiting could enable an attacke...

8.7CVSS5.8AI score0.00357EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/05 11:36 p.m.•54 views

CVE-2026-27778

The CVE-2026-27778 entry concerns the WebSocket API. The root cause is no rate limiting on authentication attempts, allowing potential denial-of-service by disrupting legitimate charger telemetry and enabling brute-force access attempts. The available documents consistently describe the issue but...

8.7CVSS6AI score0.00776EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder