PatchTheCVEcharge portal vulnerabilities and fixes
Recent CVEs affecting charge portal, with upgrade or downgrade steps. 3 tracked.
Also searched as: chargeportal.
charge portal has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-20. Highest priority: CVE-2026-25192 (score 48/100).
- CVE-2026-31904 HIGH 7.5 MITIGATE The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests
- CVE-2026-27649 HIGH 7.3 MITIGATE The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple end
- CVE-2026-25192 CRITICAL 9.4 MITIGATE WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station
FAQ
How do I fix charge portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is charge portal being exploited right now?
None of the tracked charge portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which charge portal CVE should I patch first?
CVE-2026-25192 currently ranks highest (48/100): WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station .