Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Risk score

60.0

Published

2026-07-10

Status

Published

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

Weaknesses

CWE-613

Coverage 1

vulnerability

Hydro-Québec Le Circuit Electrique charging station backend

Hydro-Québec has addressed vulnerabilities in its Le Circuit Electrique charging station backend, preventing potential privilege escalation and denial-of-service attacks. The issues stemmed from a lack of proper authenti…

CISA Advisories · Jul 7, 2026 Medium

CVE-2026-20744CVE-2026-42952CVE-2026-44383CAcwe-284cwe-307cwe-613

All articles mentioning it

Advisories and references

• hydroquebec.com/nous-joindre/
• cisa.gov/news-events/ics-advisories/icsa-26-188-01
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...