CVE-2026-9396

A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitation appears to be difficult. The original disclosure mentions, that "[t]hese vulnerabilities have been reported to Besen and we have received their acknowlegement that they are reviewing this as of April 2026."

• CWE-1021

• https://github.com/carfeii/besen#finding-3-firmware-version-check-manipulation-and-ui-spoofing
• https://vuldb.com/submit/813575
• https://vuldb.com/vuln/365377
• https://vuldb.com/vuln/365377/cti

Published

May 24, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93954A security vulnerability has been detected in grimmory-tools…4.3
• CVE-2026-93955A vulnerability was detected in grimmory-tools grimmory up t…4.3
• CVE-2026-93956A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Aff…3.5
• CVE-2026-93957A vulnerability has been found in olivier-ls PHP-FTS up to 1…4.3
• CVE-2026-93958A vulnerability was found in D-Link R95 BE9500_1.00.16. This…9.1
• CVE-2026-93959A vulnerability was determined in SourceCodester Online Revi…7.3
• CVE-2026-93960A vulnerability was identified in Pixelfed up to 0.12.11. Im…4.3
• CVE-2026-93961A security flaw has been discovered in Dromara UJCMS up to 1…5.3
• CVE-2026-93962A weakness has been identified in Kamailio up to 5.8.8/6.0.7…8.3
• CVE-2026-93963A security vulnerability has been detected in itsourcecode L…6.3
• CVE-2026-93964A vulnerability was detected in NginxProxyManager nginx-prox…5.3
• CVE-2026-93965A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affecte…6.6