CISA advisory for Hardy Barth Salia EV Charge Controller firmware versions <=2.3.81 containing two critical vulnerabilities (CVE-2025-5873 and CVE-2025-10371). Both vulnerabilities involve unrestricted file upload flaws that can lead to remote code execution. CVE-2025-5873 affects /firmware.php in the Web UI with CVSS 6.3, while CVE-2025-10371 affects /api.php with CVSS 7.3. Public proof-of-concept exploits are available. Hardy Barth did not respond to CISA coordination efforts. These vulnerabilities impact critical infrastructure in Energy and Transportation sectors globally.