Skip to content

Vendor

XCharge vulnerabilities

3 published CVES affecting XCharge, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of XCharge alerts

Products

Latest XCharge CVEs

Newest publication first

  1. CVE-2026-9039 Initialization of a resource with an insecure default in XCharge C6

    Published
    HighCVSS 8.6 EPSS 0.20%

    A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it...

  2. CVE-2026-9038 Stack-based buffer overflow in XCharge C6

    Published
    HighCVSS 8.6 EPSS 0.23%

    A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently validated, memory corrupt...

  3. CVE-2026-9037 Download of code without integrity check in XCharge C6

    Published
    CriticalCVSS 9.3 EPSS 0.25%

    A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface. Because cryptographic signatures are not verified, an attacker with the ability to interfere with or impers...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.