Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-20882 WebSocket API Rate Limit Bypass Enabling Denial-of-Service and Authentication Attacks https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20882
Post summary
The text announces CVE-2026-20882, describing a WebSocket API rate‑limit bypass that can lead to denial‑of‑service and authentication attacks, but provides no proof of concept, exploit details, or patch information.
CVE-2026-20882 The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to co… https://www.cve.org/CVERecord?id=CVE-2026-20882
Post summary
CVE-2026-20882 exposes a denial‑of‑service vulnerability owing to missing rate limiting on WebSocket authentication requests, yet no PoC, exploit code, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mvm | mobiliti_e-mobi.hu | - | - | - |