PatchTheCVEctek vulnerabilities
Recent CVEs affecting ctek products. 3 tracked.
ctek has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-20. Highest priority: CVE-2026-25192 (score 48/100).
- CVE-2026-31904 HIGH 7.5 MITIGATE The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests
- CVE-2026-27649 HIGH 7.3 MITIGATE The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple end
- CVE-2026-25192 CRITICAL 9.4 MITIGATE WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station
FAQ
How do I fix ctek vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ctek being exploited right now?
None of the tracked ctek CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ctek CVE should I patch first?
CVE-2026-25192 currently ranks highest (48/100): WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station .