Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:18:43 +0000 CVE-2026-44104 — ControllerAgent does not perform validation of firmware https://vulnerability.circl.lu/vuln/cve-2026-44104 <p><strong>Affected:</strong> Phoenix Contact CHARX SEC-3150, Phoenix Contact CHARX SEC-3100, Phoenix Contact CHARX SEC-3050, Phoenix Contact CHARX SEC-3000</p> <p>The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.</p> <p><strong>Affected:</strong> Phoenix Contact CHARX SEC-3150, Phoenix Contact CHARX SEC-3100, Phoenix Contact CHARX SEC-3050, Phoenix Contact CHARX SEC-3000</p> <p>The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.</p> https://vulnerability.circl.lu/vuln/cve-2026-44104