Vulnerability Description
A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-9039?
CVE-2026-9039 is a documented vulnerability. A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The ser...
How severe is CVE-2026-9039?
CVSS scoring is not yet available for CVE-2026-9039. Check NVD for updates.
Is there a patch for CVE-2026-9039?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.