CVE-2026-42952: Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.
Previously, there was no throttling on repeated authentication attempts
to the charging station backend, which could allow an attacker to
execute a denial-of-service attack.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-42952
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-42952 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Previously
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-55461: Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores u…nvd · 2026-07-10
- highCVE-2026-8932: libcurl would reuse a previously created connection even when some mTLS config related option h…nvd · 2026-07-03
- criticalCVE-2026-11564: libcurl keeps previously used connections in a connection pool for subsequent transfers to reu…nvd · 2026-07-03
- highCVE-2026-53904: MCO is vulnerable to Account Denial of Service due to improper implementation of password rese…nvd · 2026-07-01
- unknownCVE-2026-53296: In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: fre…nvd · 2026-06-26
- highCVE-2026-11703: Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the bin…nvd · 2026-06-25
More from NVD Recent CVEs
- unknownCVE-2026-57828: The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload t…2026-07-11
- unknownCVE-2026-57827: The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that al…2026-07-11
- highCVE-2026-1359: The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized m…2026-07-11
- highCVE-2026-9282: The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up…2026-07-11
- mediumCVE-2026-9017: The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to autho…2026-07-11