CVE-2026-111698 roinli CVE debrief

Who should care

Defenders responsible for HUIZHI ChargeOS cloud systems, particularly those using version 3.0.9 or earlier, should assess exposure and prioritize mitigation. System administrators and security teams should verify system exposure, apply patches as available, and monitor for suspicious activity related to wallet balance modifications. Those managing charging services should also review system configurations for potential vulnerabilities.

Why it matters

Defenders should care about CVE-2026-111698 because it allows unauthorized modification of wallet balances in HUIZHI ChargeOS cloud systems, potentially leading to financial loss or service disruption. System administrators and security teams responsible for HUIZHI ChargeOS cloud deployments should verify system exposure, apply patches as available, and monitor for suspicious activity.

• Potential unauthorized modification of wallet balances
• Possible exploitation for financial gain or disruption
• Need for verification of system exposure and patch application
• Potential impact on charging service consumption and revenue

Technical summary

The vulnerability exists in the hcp-mp PayController.xcxRecharge endpoint of HUIZHI ChargeOS cloud through version 3.0.9. It allows attackers to modify wallet balances without payment by manipulating the amount and userId parameters in requests. This affects HUIZHI ChargeOS cloud systems using version 3.0.9 or earlier. The vulnerability can lead to unauthorized modification of wallet balances, potentially resulting in financial loss or service disruption. System administrators should verify system exposure and apply patches as available.

Defensive priority

Defenders should prioritize verifying the presence of this vulnerability in their systems and applying patches or mitigations as available.

Recommended defensive actions

• Verify the presence of the vulnerable endpoint in your system
• Assess exposure of the vulnerable endpoint to unauthorized users
• Apply patches or mitigations as available
• Monitor for suspicious activity related to wallet balance modifications
• Review system logs for unauthorized access
• Conduct a thorough risk assessment of current system configurations
• Implement additional security measures to prevent similar vulnerabilities

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, affected versions, and references to additional information. The vulnerability exists in HUIZHI ChargeOS cloud through version 3.0.9. Evidence is limited to public CVE details and related source information. Defenders should verify system exposure and apply patches as available. Additional information may be needed for comprehensive risk assessment.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.