A ChargePoint Home Flex device vulnerability allows network-adjacent attackers to execute arbitrary code without authentication due to improper validation of user-supplied strings in OCPP messages. This vulnerability, tracked as CVE-2026-4157, exists within the handling of OCPP messages, specifically due to a lack of proper validation of user-supplied strings before executing system calls. The vulnerabili [truncated]
A vulnerability in ChargePoint Home Flex charging stations allows remote attackers to disclose sensitive information. The flaw exists in the genpw script, which includes a secret cryptographic seed value. This can be leveraged to disclose stored credentials, potentially leading to further compromise. The ChargePoint Home Flex charging station's genpw script contains a secret cryptographic seed value that [truncated]
