Vulnerability intelligence

CVE-2026-20744

Hydro-Québec Le Circuit Electrique charging station backend CWE-284

The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.8%

Riskier than 54% of all CVEs · checked 2026-10-11

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

1 article across 1 outlet · first covered Jul 13, 2026 · latest Jul 13, 2026

Coverage timeline