CVE-2026-44090

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 (affected versions not specified)

Description Missing authentication allows an unauthenticated remote attacker to access the MQTT broker, which relies solely on a firewall for external protection. This could result in the device being fully compromised. Additionally, the ModBus Server contains a dangerous function that can be exploited to cause a Denial-of-Service (DoS) condition, which is a state where the system becomes unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.