What is GHSA-p256-gw98-w4cg?

GHSA-p256-gw98-w4cg is a security advisory published by GitHub Security Advisories with High severity. The charging station does not require authentication for Bluetooth commands to perform actions....

Which CVE IDs does GHSA-p256-gw98-w4cg cover?

GHSA-p256-gw98-w4cg covers the following CVE IDs: CVE-2026-22099. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-p256-gw98-w4cgHigh

The charging station does not require authentication for Bluetooth commands to perform actions....

Vendor

GitHub Security Advisories

Published

July 13, 2026

Last Modified

July 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-22099 →

📋 Description

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-22099
https://csirt.divd.nl/DIVD-2026-00001
https://github.com/advisories/GHSA-p256-gw98-w4cg