PT-2026-66431 · Phoenix Contact · Charx Sec-3000+3

CVE-2026-44103 · Publicado 2026-07-30 · Atualizado 2026-07-30

NVD

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This vulnerability could be used in chain with CVE-2026-44104.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-44103

Produtos afetados

Charx Sec-3000

Charx Sec-3050

Charx Sec-3100

Charx Sec-3150

Referências · 2

• https://certvde.com/en/advisories/VDE-2026-008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44103 · Nota de Segurança