CVE-2026-44095

Covered in 2 advisories

Radar advisories

2026-07-30 ZDI ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability Improper input validation in charx_set_ip_address enables local privilege escalation on Phoenix Contact CHARX SEC-3150 devices.
2026-07-30 ZDI ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability Authentication is required to exploit the command injection on CHARX SEC-3000 devices.

References