Denial-of-Service Vulnerability in Hydro-Québec Charging Station Backend
CVE-2026-42952
8.7HIGH
What is CVE-2026-42952?
This vulnerability occurs due to the absence of throttling on repeated authentication attempts within the Hydro-Québec charging station backend. An attacker could exploit this flaw to send multiple authentication requests in a short period, resulting in a denial-of-service condition. This could prevent legitimate users from accessing services, thereby disrupting operations and causing potential revenue loss.
Affected Version(s)
Le Circuit Electrique charging station backend 0
References
CVSS V4
Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
An anonymous researcher reported this vulnerability to CISA