CVE-2026-9397

HighCVSS 8.1/10Last modified Jul 23, 2026

Description

A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The original disclosure mentions, that "[t]hese vulnerabilities have been reported to Besen and we have received their acknowlegement that they are reviewing this as of April 2026."

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266 CWE-285

Affected software

No affected versions have been published.

Timeline

Published: May 24, 2026
Last modified: Jul 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-939707.3A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/s CVE-2026-939715.3A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This CVE-2026-939727.3A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown funct CVE-2026-939737.3A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the fil CVE-2026-939747.3A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admi CVE-2026-939752.4A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php CVE-2026-939762.4A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The ma CVE-2026-939773.5A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the CVE-2026-939787.3A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of th CVE-2026-939797.3A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/lo CVE-2026-93983.1A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component B CVE-2026-939807.3A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin