CVE-2026-9039
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 28, 2026
Vendor
unknown
Description
A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.