CVE-2026-44107

HIGH CVSS 7.5 View on NVD ↗

Description

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://www.certvde.com/en/advisories/VDE-2026-008/

Published: Jul 30, 2026 07:16 UTC Modified: Jul 30, 2026 16:17 UTC