Enel X vulnerabilities
We track 3 vulnerabilities in Enel X products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2026.
Latest Enel X vulnerabilities
- 8.8 High severity
JuiceBox 40: Missing Authentication for Critical Functionality
Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is no
- 8.8 High severity
JuiceBox Pro 3.0 22kW Cellular: Improper Validation of Specified Type of Input
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.
- 8.8 High severity
JuiceBox Pro 3.0 22kW Cellular: Improper Neutralization of Special Elements used in an OS Command
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.