Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-44100 EUVD-2026-51035GHSA-382g-wcph-26j3

JupiCore charging point reconfiguration without auth

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by CERTVDE

Description

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering.

Affected products

VendorProductAffectedFixed
Phoenix Contact CHARX SEC-3150 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3100 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3050 1.0.0 – < 1.9.1 1.9.1
Phoenix Contact CHARX SEC-3000 1.0.0 – < 1.9.1 1.9.1

Advisories 1

References