NVD security advisoryHigh
High advisory for The web server does not check authentica
CVE-2026-22110 · Reported 30 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
The web server does not check authenticaAffected product
Advisory overview
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.
