CVE-2026-20744: Hydro-Québec Le Circuit Electrique Charging Station Backend

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.

Affected products

• Hydro-Québec Le Circuit Electrique Charging Station Backend

Published 2026-07-10. Last modified 2026-07-14.