ChargePoint vulnerabilities
We track 8 vulnerabilities in ChargePoint products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on April 11, 2026.
Latest ChargePoint vulnerabilities
- 7.5 High severity
Home Flex: Improper Neutralization of Special Elements used in an OS Command
ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex devices. Authentication is not require
- 7.5 High severity
Home Flex: Stack-based Buffer Overflow
ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex EV chargers. Authentication is
- 7.5 High severity
Home Flex: Inclusion of Sensitive Information in Source Code
ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging stations. Aut
- 8.8 High severity
Home Flex: Improper Control of Generation of Code
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wlanapp modul
- 8.8 High severity
Home Flex: Improper Access Control
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee mod
- 8.8 High severity
Home Flex: Improper Neutralization of Special Elements used in a Command
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of O
- 8.8 High severity
Home Flex: Out-of-bounds Write
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wlanchnllst f
- 8.8 High severity
Home Flex: Buffer Copy without Checking Size of Input
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SrvrToSmSetAu