ICSA-26-188-01
·
Published 2026-07-07
·
View on CISA ICS-CERT ↗
Hydro-Québec Le Circuit Electrique charging station backend
CVSS 9.8
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could lead to privilege escalation, or result in a denial-of-service attack.
CVEs (3)
Remediations
- Hydro-Québec has updated the majority of charging stations to disable OCPP, mitigating the risk of exploitation. Hydro-Québec has also implemented authentication systems to mitigate the issue for certain charging stations which are still reliant on OCPP. Contact Hydro-Québec with any additional questions.
Affected Vendors
Hydro-Québec
Affected Products (1)
Hydro-Québec
·
Le Circuit Electrique charging station backend
<June_2026
Affected Sectors
Transportation Systems
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more