Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-31904 The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to co… https://www.cve.org/CVERecord?id=CVE-2026-31904
Post summary
The entry describes a missing rate‑limiting feature in the WebSocket API, flagging a potential for abuse while providing no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-31904 WebSocket API Rate Limiting Vulnerability Enables Denial-of-Service Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31904
Post summary
The post announces CVE-2026-31904, a rate‑limiting vulnerability in WebSocket API that can cause denial‑of‑service, but it provides no PoC, exploit, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ctek | charge_portal | - | - | - |