CVE-2026-44100 — JupiCore charging point reconfiguration without auth

CVE-2026-44100

JupiCore charging point reconfiguration without auth PUBLISHED

Description (CNA)

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / CHARX SEC-3150	affected 1.0.0 before 1.9.1
Phoenix Contact / CHARX SEC-3100	affected 1.0.0 before 1.9.1
Phoenix Contact / CHARX SEC-3050	affected 1.0.0 before 1.9.1
Phoenix Contact / CHARX SEC-3000	affected 1.0.0 before 1.9.1

CWE

CWE-306

References

https://www.certvde.com/en/advisories/VDE-2026-008/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.