CVE-2026-20792

CVE-2026-20792 describes a critical vulnerability in the Chargemap chargemap.com WebSocket API, where the absence of rate limiting on authentication requests allows for denial-of-service or brute-force attacks. This flaw carries a CVSS score of 9.8 (CRITICAL), indicating a network-exploitable vulnerability with low attack complexity that can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, suggesting awareness among security researchers.