CVE-2026-20792

The WebSocket Application Programming Interface lacks restrictions on 
the number of authentication requests. This absence of rate limiting may
 allow an attacker to conduct denial-of-service attacks by suppressing 
or misrouting legitimate charger telemetry, or conduct brute-force 
attacks to gain unauthorized access.