CVE-2026-44091

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 (affected versions not specified)

Description The MQTT Service contains a Server-Side Request Forgery (SSRF) flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the creation of a new configuration entry in the system configuration. This can result in Remote Code Execution (RCE), leading to a loss of system integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.