CVE-2026-44092

CVSS Score & Metrics

Base Score

9.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H                                    

Vulnerability Description

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.

Vulnerability Details

Published Date

July 30, 2026

Last Modified

July 30, 2026

CWE ID

CWE-93

Source

NVD

Vendor

Phoenix Contact

Product

CHARX SEC-3150, CHARX SEC-3100, CHARX SEC-3050, CHARX SEC-3000

External References

https://www.certvde.com/en/advisories/VDE-2026-008/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment