Resource exhaustion in Efacec Qc60/90/120
CVE-2026-22540
The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
Vulnerability class: DoS (Denial of Service)
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (27.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 27.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.000
Affected products
- Efacec Qc60/90/120 — versions 8