Resource exhaustion in Efacec Qc60/90/120

CVE-2026-22540

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.