RCE in Xcharge C6

CVE-2026-9039

A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces expose…

EPSS: 0.000 (7.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References