PatchTheCVEchargepoint vulnerabilities
Recent CVEs affecting chargepoint products. 3 tracked.
chargepoint has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-11. Highest priority: CVE-2026-4155 (score 43/100).
- CVE-2026-4157 HIGH 7.5 UPGRADE ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability
- CVE-2026-4155 HIGH 7.5 UPGRADE ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
- CVE-2026-4156 HIGH 7.5 UPGRADE ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability
FAQ
How do I fix chargepoint vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chargepoint being exploited right now?
None of the tracked chargepoint CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chargepoint CVE should I patch first?
CVE-2026-4155 currently ranks highest (43/100): ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability.