CVE-2026-44107: Exposed Reboot via Modbus

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-30 · updated 2026-07-30
Weakness: CWE-749

Description

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.

Affected products

Phoenix Contact CHARX SEC-3000: from 1.0.0 before 1.9.1 — fixed in 1.9.1
Phoenix Contact CHARX SEC-3050: from 1.0.0 before 1.9.1 — fixed in 1.9.1
Phoenix Contact CHARX SEC-3100: from 1.0.0 before 1.9.1 — fixed in 1.9.1
Phoenix Contact CHARX SEC-3150: from 1.0.0 before 1.9.1 — fixed in 1.9.1

How to fix

Upgrade to a fixed version: Phoenix Contact CHARX SEC-3000 1.9.1; Phoenix Contact CHARX SEC-3050 1.9.1; Phoenix Contact CHARX SEC-3100 1.9.1; Phoenix Contact CHARX SEC-3150 1.9.1. Check the vendor advisory for mitigations.

References

https://www.certvde.com/en/advisories/VDE-2026-008/

Get alerted when CVE-2026-44107 or the next vulnerability affects your stack