# CVE-2026-44103: Phoenix Contact CHARX SEC firmware integrity bypass in JupiCore

Source: https://junglewise.ai/threats/cve-2026-44103-phoenix-contact-charx-sec-firmware-integrity-bypass-in-jupicore  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-30. Updated: 2026-07-30  
License: CC BY 4.0 with a link back

CVE-2026-44103 · Severity: medium · CVSS 5.3 · Published 2026-07-30

Phoenix Contact CHARX SEC-3xxx devices are controllers used to manage electric vehicle (EV) charging stations. A security flaw in these controllers allows an unauthorized person to remotely install malicious software onto the internal charging module. This could allow an attacker to tamper with the device's operations or compromise its integrity, potentially disrupting charging services.

Technologies: [Phoenix Contact CHARX SEC-3000](https://junglewise.ai/threats/technologies/charx-sec-3000), [Phoenix Contact CHARX SEC-3050](https://junglewise.ai/threats/technologies/charx-sec-3050), [Phoenix Contact CHARX SEC-3100](https://junglewise.ai/threats/technologies/charx-sec-3100), [Phoenix Contact CHARX SEC-3150](https://junglewise.ai/threats/technologies/charx-sec-3150). Vendors: [Phoenix Contact](https://junglewise.ai/threats/vendors/phoenix-contact).

## Quick answers

**Is CVE-2026-44103 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44103 being exploited in the wild.

**How severe is CVE-2026-44103?** Medium severity, with a CVSS score of 5.3, published 30 July 2026.

**Which products and versions are affected?** Phoenix Contact CHARX SEC-3000 Firmware < 1.9.1; Phoenix Contact CHARX SEC-3050 Firmware < 1.9.1; Phoenix Contact CHARX SEC-3100 Firmware < 1.9.1; Phoenix Contact CHARX SEC-3150 Firmware < 1.9.1.

**Is there a fix for CVE-2026-44103?** A patch was published on 2026-07-30: Fixed in firmware version 1.9.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-44103 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-44103?** Check whether you run Phoenix Contact CHARX SEC-3000, Phoenix Contact CHARX SEC-3050, Phoenix Contact CHARX SEC-3100 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Phoenix Contact CHARX SEC-3xxx series charging controllers contain a vulnerability in the JupiCore service. The service fails to perform integrity or verification checks (such as cryptographic signatures) on firmware updates transmitted to the internal charging module. An unauthenticated remote attacker can exploit this lack of verification to inject and execute malicious firmware. This vulnerability can be chained with other flaws, such as CVE-2026-44104, to further compromise the device. The issue is resolved in firmware version 1.9.1.

## Affected products

- Phoenix Contact CHARX SEC-3000 Firmware < 1.9.1
- Phoenix Contact CHARX SEC-3050 Firmware < 1.9.1
- Phoenix Contact CHARX SEC-3100 Firmware < 1.9.1
- Phoenix Contact CHARX SEC-3150 Firmware < 1.9.1

## Timeline

- 2026-07-30: disclosed
- 2026-07-30: advisory
- 2026-07-30: patched: Fixed in firmware version 1.9.1

## References

- [https://www.certvde.com/en/advisories/VDE-2026-008/](https://www.certvde.com/en/advisories/VDE-2026-008/)

## Related threats

- [Phoenix Contact CHARX SEC command injection in system configuration](https://junglewise.ai/threats/cve-2026-7849-phoenix-contact-charx-sec-command-injection-in-system)
- [Phoenix Contact CHARX SEC-3xxx firewall bypass during shutdown](https://junglewise.ai/threats/cve-2026-44108-phoenix-contact-charx-sec-3xxx-firewall-bypass-during-shutdown)
- [Phoenix Contact CHARX SEC charging controller unauthenticated reboot via Modbus TCP](https://junglewise.ai/threats/cve-2026-44107-phoenix-contact-charx-sec-charging-controller-unauthenticated)
- [Phoenix Contact CHARX SEC-3xxx privilege escalation in init-script](https://junglewise.ai/threats/cve-2026-44106-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-init)
- [Phoenix Contact CHARX SEC-3xxx credential exposure in log files](https://junglewise.ai/threats/cve-2026-44105-phoenix-contact-charx-sec-3xxx-credential-exposure-in-log-files)