CVE-2026-25113

CVE-2026-25113 is a critical vulnerability affecting the swtchenergy.com WebSocket API, stemming from a lack of rate limiting on authentication requests. This flaw allows unauthenticated attackers to perform denial-of-service attacks, disrupt charger telemetry, or brute-force credentials for unauthorized access. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential future exploitation.