CVE-2026-4157 ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability

ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex devices. Authentication is not required to exploit this vulnerability. The...

PT-2026-25836

Name of the Vulnerable Software and Affected Versions ChargePoint Home Flex affected versions not specified Description A severe issue exists in ChargePoint Home Flex that allows for remote code execution via command injection in the revssh service. This was discovered during the Pwn2Own...