CVE-2026-25114: CloudCharge cloudcharge.se Missing Restriction of Excessive Authentication Attempts
The WebSocket API of CloudCharge cloudcharge.se does not limit the number of authentication requests, a weakness mapped to CWE-307. NVD assigns a base score of 9.8 (critical), while other providers in the record report lower scores. The record lists no fixed version, and no confirmed exploitation appears in the sources consulted.
Overview
CVE-2026-25114 affects the WebSocket Application Programming Interface of CloudCharge cloudcharge.se. According to the record, the interface does not restrict the number of authentication requests, a weakness mapped to CWE-307. The CISA advisory ICSA-26-057-03 describes the issue.
Impact
- Denial of service: the source states that an attacker could suppress or mis-route legitimate charger telemetry.
- Unauthorized access: the lack of rate limiting may enable brute-force attempts against authentication.
- Scores in the record range from 7.5 to 9.8 depending on provider and scoring model. NVD lists 9.8 as critical.
Affected products and versions
- Product listed: Cloudcharge Cloudcharge.se.
- Versions: the record states 'versions not specified by the source' and 'All versions'. No specific version boundaries are available.
- Fixed versions: none are listed in the record. This does not confirm that no fix exists.
Exploitation status
The record shows the CVE is not listed in the CISA Known Exploited Vulnerabilities catalog. No confirmed exploitation appears in the sources consulted. The SSVC data in the record lists exploitation as none and automatable as yes, which is a decision-support assessment and not evidence of attacks. The EPSS probability is 0.00494 with a percentile of 0.41528.
Remediation and mitigation
- Ask the vendor for an updated release and confirm the fix status through the CloudCharge support contact page.
- Restrict network exposure of the WebSocket interface, placing it behind segmented networks and allowing only trusted sources.
- Apply compensating controls such as authentication logging and centralized monitoring until a fix is confirmed.
- Review the advisory's machine-readable file for vendor guidance: CISA CSAF file.
Detection guidance
- Monitor for unusually high volumes of authentication attempts on the WebSocket endpoint.
- Watch for unexpected gaps or anomalies in charger telemetry that could indicate disruption.
- Alert on repeated failed logins followed by a successful login from the same source.
Limitations of the available information
The record does not provide specific affected version ranges, fixed versions, vendor patch details, or a technical description of the authentication endpoint. Score differences between providers are not explained. Dates and scores should be verified against the primary sources.
Frequently asked questions
What is the core weakness in CVE-2026-25114?
The WebSocket API does not restrict the number of authentication requests, which is classified as CWE-307, improper restriction of excessive authentication attempts.
Is this CVE known to be actively exploited?
The record shows it is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.
Is a fixed version available?
The record lists no fixed version. Whether a fix exists is unknown, so operators should contact the vendor to confirm.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.