CVE-2026-9395: Besen BS20 Ev Charging Station

Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentials. The attack needs to be initiated within the local network. The original disclosure mentions, that "[t]hese vulnerabilities have been reported to Besen and we have received their acknowlegement that they are reviewing this as of April 2026."

Affected products

• Besen BS20 Ev Charging Station: version 20260426 only

Published 2026-05-24. Last modified 2026-07-23.