CVEvulnerability

CVE-2026-44383

8.7 HIGH Published 2026-07-10 Modified 2026-10-25 Official page ↗

Status: Deferred
Published: 2026-07-10
Last modified: 2026-10-25
Assigner: [email protected]
CVSS 4.0 ([email protected]): 8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-613

Description

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

Weakness · not in database (1)

CWE-613

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-188-01.json github.com
https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-01 www.cisa.gov
https://www.hydroquebec.com/nous-joindre/ www.hydroquebec.com

CVE-2026-44383

Description

Related

Weakness · not in database (1)

References