CVE-2026-9039
NONE—CVSS v3
—CVSS v2
0.02%
EPSS (exploit probability)
CWE-1188CWE
Description
A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.
Affected routers (0)
No routers currently mapped to this CVE in our database.