CVE-2026-44094

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 (affected versions not specified)

Description An unauthenticated remote attacker can force the system to revert to a firmware partition that uses an insecure configuration, which includes default credentials. This allows the attacker to obtain SSH access to the system as the unprivileged user user-app. This action may also result in the interruption of charging processes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.