Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: XCharge Clear all filters
TI-2026-07946 CVE-2026-9039 · GHSA-9w95-xvpv-cvjw

Initialization of a resource with an insecure default in XCharge C6

Priority LOW 39

A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00198 Published 2026-05-28 Fixed in May_22_2026 CWE-1188
TI-2026-07945 CVE-2026-9038 · GHSA-88gx-5947-cmjp

Stack-based buffer overflow in XCharge C6

Priority LOW 39

A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.0023 Published 2026-05-28 Fixed in May_22_2026 CWE-121
TI-2026-07944 CVE-2026-9037 · GHSA-6qw7-34qq-r69v

Download of code without integrity check in XCharge C6

Priority MEDIUM 48

A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00246 Published 2026-05-28 Fixed in May_22_2026 CWE-494