Is CVE-2026-20744 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-20744?

CVE-2026-20744 has a CVSS v3 severity of CRITICAL (9.8).

Back

Description

The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.