PT-2026-66420 · Phoenix Contact · Charx Sec-3000+3

CVE-2026-44092 · Publicado 2026-07-30 · Atualizado 2026-07-30

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.

Correção

Enumeração de Fraquezas

CWE-93

Identificadores relacionados

CVE-2026-44092

Produtos afetados

Charx Sec-3000

Charx Sec-3050

Charx Sec-3100

Charx Sec-3150

Referências · 2

• https://certvde.com/en/advisories/VDE-2026-008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44092 · Nota de Segurança