Skip to content
Threat Feed
Subscribe

Product

CHARX SEC-3150

2 briefs RSS
high advisory

Privilege Escalation Vulnerability in Phoenix Contact CHARX Controllers

A local OS command injection vulnerability (CVE-2026-44095) in Phoenix Contact CHARX charging controllers allows low-privileged users to execute arbitrary commands as root.

CHARX SEC-3000 +3 privilege-escalation industrial-control-systems cve command-injection
3t 1c
critical advisory

Unauthenticated Remote Access to Phoenix Contact CHARX SEC MQTT Broker

A critical vulnerability (CVE-2026-44090) in Phoenix Contact CHARX SEC controllers allows unauthenticated remote attackers to gain full device control by bypassing authentication on the MQTT broker.

CHARX SEC-3150 +7 industrial-control-systems mqtt cve-2026-44091 ics cve injection authentication-bypass cve-2026-44100 +14
2r 5t 12c