PT-2026-66431 · Phoenix Contact · Charx Sec-3000+3

CVE-2026-44103 · Published 2026-07-30 · Updated 2026-07-30

NVD

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This vulnerability could be used in chain with CVE-2026-44104.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-44103

Affected Products

Charx Sec-3000

Charx Sec-3050

Charx Sec-3100

Charx Sec-3150

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-44103 · Security Note
• https://certvde.com/en/advisories/VDE-2026-008 · Note