Skip to content
OpenAdvisories
High · 7.8 CVE-2026-44093 EUVD-2026-51028GHSA-g352-vvxj-jq8m

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by CERTVDE

Description

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.

Affected products

VendorProductAffectedFixed
Phoenix Contact CHARX SEC-3150 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3100 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3050 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3000 1.0.0 – < 1.9.1 1.9.1

Advisories 1

References