Skip to content
OpenAdvisories

Vendor

CTEK

4 known vulnerabilities.

Products

Chargeportal 4 SkyRouter Series 4200 and 4400 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-25192

    CTEK Chargeportal Missing Authentication for Critical Function

    WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discov…

    CTEK Chargeportal