{"id":"CVE-2026-22110","published":"2026-10-30T11:17:33.040","lastModified":"2026-10-30T19:39:14.897","description":"The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://csirt.divd.nl/CVE-2026-22110","tags":[]},{"url":"https://csirt.divd.nl/DIVD-2026-00012","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}