CVE-2026-27778
HIGHePower epower.ie - Denial of Service via WebSocket Authentication Request Flood
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2026-27778. PoCs published by adminlove520, KimJ6.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2026-27778, demonstrating an authentication bypass vulnerability (CWE-307) via brute-force attacks on a WebSocket-based authentication system. It includes both an attack script and a server simulator to analyze the vulnerability.
Description
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Exploits (2)
This repository contains a functional proof-of-concept for CVE-2026-27778, demonstrating an authentication bypass vulnerability (CWE-307) via brute-force attacks on a WebSocket-based authentication system. It includes both an attack script and a server simulator to analyze the vulnerability.
This repository contains a functional proof-of-concept for CVE-2026-27778, demonstrating a brute-force attack (CWE-307) against a WebSocket-based authentication system. The exploit simulates rapid authentication attempts to bypass rate-limiting mechanisms.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H