Skip to content
Threat Feed
Subscribe

Vendor

Phoenix Contact

5 briefs RSS
low advisory

Unauthenticated Denial-of-Service Vulnerability in PLCnext Engineer

An unauthenticated remote denial-of-service vulnerability in the Phoenix Contact PLCnext Engineer communication interface allows attackers to crash the service, requiring manual intervention.

PLCnext Engineer dos industrial-control-system vulnerability
1t 1c
high advisory

Privilege Escalation Vulnerability in Phoenix Contact CHARX Controllers

A local OS command injection vulnerability (CVE-2026-44095) in Phoenix Contact CHARX charging controllers allows low-privileged users to execute arbitrary commands as root.

CHARX SEC-3000 +3 privilege-escalation industrial-control-systems cve command-injection
3t 1c
critical advisory

Command Injection in Phoenix Contact CHARX SEC Controllers

An unauthenticated remote command injection vulnerability in Phoenix Contact CHARX SEC controllers allows attackers to execute arbitrary code as root via malformed system configuration inputs.

CHARX SEC-3150 +3 cve-2026-7849 command-injection industrial-control-system
2t 1c
critical advisory

Unauthenticated Remote Access to Phoenix Contact CHARX SEC MQTT Broker

A critical vulnerability (CVE-2026-44090) in Phoenix Contact CHARX SEC controllers allows unauthenticated remote attackers to gain full device control by bypassing authentication on the MQTT broker.

CHARX SEC-3150 +7 industrial-control-systems mqtt cve-2026-44091 ics cve injection authentication-bypass cve-2026-44100 +14
2r 5t 12c
high advisory

Phoenix Contact FL MGUARD Multiple Vulnerabilities

A remote attacker can exploit multiple vulnerabilities in Phoenix Contact FL MGUARD to escalate privileges, disclose sensitive information, or cause a denial-of-service condition.

FL MGUARD phoenix-contact vulnerability privilege-escalation information-disclosure denial-of-service
2r 3t