8.6 HighCWE-121
CVE-2026-9038
Stack-based buffer overflow in XCharge C6
XChargeC6
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.3%probability of exploitation in the next 30 days
Higher than 16% of scored CVEs
SeverityCVSS
8.6High
Description NVD
A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently validated, memory corruption may occur, which can lead to execution of unauthorized code with elevated privileges.
Coverage 1 article · 1 outlet
- XCharge C6 EV chargers face critical firmware and access flawsSecurityOnline · first in our coverage · mentions it in passing