Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2025-54564

uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allows command execution as the nobody user.

No technical information available.

No CWE or OWASP classifications available.