CVE-2026-4156 | ChargePoint Home Flex OCPP getpreq stack-based overflow

A vulnerability, which was classified as critical, was found in ChargePoint Home Flex. The affected element is the function getpreq of the component OCPP Handler. Executing a manipulation can lead to stack-based buffer overflow.

This vulnerability is handled as CVE-2026-4156. The attack can only be done within the local network. There is not any exploit available.

You should upgrade the affected component.