CVE-2026-9398

A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass by capture-replay. The attack must be carried out from within the local network. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The original disclosure mentions, that "[t]hese vulnerabilities have been reported to Besen and we have received their acknowlegement that they are reviewing this as of April 2026."

• CWE-287
• CWE-294

• https://github.com/carfeii/besen#finding-5-unauthorized-tampering-of-charger-commands
• https://vuldb.com/submit/813577
• https://vuldb.com/vuln/365379
• https://vuldb.com/vuln/365379/cti

Published

May 24, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93974A flaw has been found in SourceCodester Online Reviewer Mana…7.3
• CVE-2026-93975A vulnerability has been found in code-projects Assessment M…2.4
• CVE-2026-93976A vulnerability was found in code-projects Assessment Manage…2.4
• CVE-2026-93977A vulnerability was determined in code-projects Assessment M…3.5
• CVE-2026-93978A vulnerability was identified in code-projects Internship M…7.3
• CVE-2026-93979A security flaw has been discovered in code-projects Interns…7.3
• CVE-2026-93980A weakness has been identified in code-projects Internship M…7.3
• CVE-2026-93981hono before 4.13.7 fails to HTML-escape plain strings render…4.7
• CVE-2026-93982OpenPanel through commit bad75bdd writes Model Context Proto…3.3
• CVE-2026-93983OpenPanel through commit bad75bdd fails to escape property k…5
• CVE-2026-93984OpenPanel tracking API through commit bad75bddc74d12d36cfb84…5.3
• CVE-2026-93985OpenPanel js-runtime through commit bad75bdd contains a sand…9.9