CVE-2026-9039 – Initialization of a resource with an insecure default in XCharge C6

CVE ID :CVE-2026-9039

Published : May 28, 2026, 8:16 p.m. | 15 minutes ago

Description :A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…