A vulnerability classified as critical was found in CTEK Chargeportal. This affects an unknown part. Such manipulation leads to insufficiently protected credentials.

This vulnerability is referenced as CVE-2026-28204. It is possible to launch the attack remotely. No exploit is available.