Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-24696 WebSocket API Rate Limiting Vulnerability Enables Denial-of-Service Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24696
Post summary
The post announces a WebSocket API rate‑limiting flaw (CVE-2026-24696) capable of causing a denial‑of‑service.
CVE-2026-24696 The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to co… https://www.cve.org/CVERecord?id=CVE-2026-24696
Post summary
The CVE‑2026‑24696 vulnerability indicates that the WebSocket API lacks rate limiting on authentication requests, potentially enabling attackers to abuse the authentication mechanism.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | everon | api.everon.io | - | - | - |