Vulnerabilities

TI-2026-03605 CVE-2026-4157 · GHSA-9r43-wfq5-rv33

OS command injection in ChargePoint Home Flex

LOW 37

ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00897 Published 2026-04-11 No fix listed CWE-78

TI-2026-03604 CVE-2026-4156 · GHSA-93fc-f6pw-cp83

LOW 36

ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00539 Published 2026-04-11 No fix listed CWE-121

TI-2026-03603 CVE-2026-4155 · GHSA-69j2-hc78-98c7

MEDIUM 40

ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00711 Published 2026-04-11 No fix listed CWE-540