PT-2026-66428 · Phoenix Contact · Charx Sec-3150+1

CVE-2026-44100

·

Published

2026-07-30

·

Updated

2026-07-30

CVSS v3.1

9.4

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 charx-jupicore (affected versions not specified)
Description The CHARX JupiCore service contains a missing authentication flaw that allows an unauthenticated remote attacker to reconfigure charging points. This flaw can result in the disclosure of charging point UIDs, Denial-of-Service, and files tampering.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-44100
ZDI-26-515

Affected Products

Charx Jupicore
Charx Sec-3150