CVE-2026-22540

critical · 9.2

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

9.2

CVSS

0.4%

EPSS (exploit prob.)

30th

EPSS percentile

2026-01-07

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-400

References

https://cds.thalesgroup.com/en

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-22540