nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-44094 CVE-2026-44094
HIGH
Fallback to second RAUC slot with default credentials
Record summary
CVE-2026-44094 has a selected CVSS score of 8.3 (high).
Description
An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 30, 2026 · Source: CVE List
Affected products and versions
4| Product | Source | Version range | Status |
|---|---|---|---|
CHARX SEC-3000Browse Phoenix Contact / CHARX SEC-3000Default status: unaffected | CVE List | 1.0.0 to < 1.9.1 | affected |
CHARX SEC-3050Browse Phoenix Contact / CHARX SEC-3050Default status: unaffected | CVE List | 1.0.0 to < 1.9.1 | affected |
CHARX SEC-3100Browse Phoenix Contact / CHARX SEC-3100Default status: unaffected | CVE List | 1.0.0 to < 1.9.1 | affected |
CHARX SEC-3150Browse Phoenix Contact / CHARX SEC-3150Default status: unaffected | CVE List | 1.0.0 to < 1.9.1 | affected |
References
2certvde.com
https://www.certvde.com/en/advisories/VDE-2026-008