CVE-2026-44091

HIGH

Creation of a new configuration by posting a malicious ID to MQTT

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-44091 has a selected CVSS score of 8.8 (high).

Description

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 31, 2026 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

CHARX SEC-3000

Browse Phoenix Contact / CHARX SEC-3000

Default status: unaffected

CVE List1.0.0 to < 1.9.1affected

CHARX SEC-3050

Browse Phoenix Contact / CHARX SEC-3050

Default status: unaffected

CVE List1.0.0 to < 1.9.1affected

CHARX SEC-3100

Browse Phoenix Contact / CHARX SEC-3100

Default status: unaffected

CVE List1.0.0 to < 1.9.1affected

CHARX SEC-3150

Browse Phoenix Contact / CHARX SEC-3150

Default status: unaffected

CVE List1.0.0 to < 1.9.1affected

References

2