Is CVE-2026-9398 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9398 being exploited in the wild.

How severe is CVE-2026-9398?

Low severity, with a CVSS score of 3.1, published 24 May 2026.

Which products and versions are affected?

Besen BS20 EV Charging Station up to 20260426.

Is there a fix for CVE-2026-9398?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-9398 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-9398?

Check whether you run Besen BS20 EV Charging Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9398: Besen BS20 EV Charging Station authentication bypass in BLE/WiFi

CVE-2026-9398 · Severity: low · CVSS 3.1 · Published 2026-05-24

The Besen BS20 EV Charging Station is a home electric vehicle charger. A security flaw in its communication protocols allows an attacker on the same local network to intercept and replay commands. This could allow an unauthorized person to tamper with charging settings, such as starting or stopping a charge or changing the power levels.

Technologies: Besen BS20 EV Charging Station. Vendors: Besen.

Quick answers

Is CVE-2026-9398 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9398 being exploited in the wild.
How severe is CVE-2026-9398?: Low severity, with a CVSS score of 3.1, published 24 May 2026.
Which products and versions are affected?: Besen BS20 EV Charging Station up to 20260426.
Is there a fix for CVE-2026-9398?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-9398 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-9398?: Check whether you run Besen BS20 EV Charging Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Besen BS20 EV Charging Station (up to version 20260426) is vulnerable to an authentication bypass via capture-replay. Commands transmitted between the mobile application and the charger via Bluetooth Low Energy (BLE) or Wi-Fi (UDP) lack encryption and integrity protection. An attacker within local network range can intercept these unencrypted UDP packets and replay or modify them to manipulate charging parameters, including duration, current, and power states. The attack is considered complex as it requires local network proximity and the ability to intercept specific traffic. As of April 2026, the vendor has acknowledged the report and is reviewing the findings.

Affected products

Besen BS20 EV Charging Station up to 20260426

Timeline

2026-04-26: disclosed: Vulnerabilities reported to vendor and acknowledged.
2026-05-24: advisory: CVE published.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.