{"schema_version":1,"title":"Phoenix Contact vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 28 vulnerabilities in Phoenix Contact: 0 in the last 7 days and 24 in the last 90 days, 9 of them critical and 0 exploited in the wild. The most recent, CVE-2026-27550, was published on 16 September 2026. 6 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/phoenix-contact","json_url":"https://junglewise.ai/threats/vendors/phoenix-contact.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/phoenix-contact","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":15,"all_time":28,"critical":9,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":24,"last_365_days":28},"latest":[{"cve":"CVE-2026-27550","cvss":8.8,"epss":0.0292,"slug":"cve-2026-27550-pepperl-fuchs-ice2-ice3-command-injection-in-field-shadow","title":"Pepperl+Fuchs ICE2/ICE3 command injection in Field_Shadow_Password class","severity":"high","exploited":false,"published_at":"2026-09-16T08:16:37.487+00:00","url":"https://junglewise.ai/threats/cve-2026-27550-pepperl-fuchs-ice2-ice3-command-injection-in-field-shadow"},{"cve":"CVE-2025-41771","cvss":4.3,"epss":0.0027,"slug":"cve-2025-41771-phoenix-contact-plcnext-sql-injection-in-notification-endpoint","title":"Phoenix Contact PLCnext SQL injection in notification endpoint","severity":"medium","exploited":false,"published_at":"2026-08-12T08:17:12.13+00:00","url":"https://junglewise.ai/threats/cve-2025-41771-phoenix-contact-plcnext-sql-injection-in-notification-endpoint"},{"cve":"CVE-2025-41770","cvss":7.5,"epss":0.0055,"slug":"cve-2025-41770-phoenix-contact-plcnext-denial-of-service-in-engineer-interface","title":"Phoenix Contact PLCnext denial-of-service in engineer interface","severity":"high","exploited":false,"published_at":"2026-08-12T08:17:11.91+00:00","url":"https://junglewise.ai/threats/cve-2025-41770-phoenix-contact-plcnext-denial-of-service-in-engineer-interface"},{"cve":"CVE-2025-41769","cvss":9.8,"epss":0.0084,"slug":"cve-2025-41769-phoenix-contact-plcnext-profinet-buffer-overflow","title":"Phoenix Contact PLCnext PROFINET buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-12T08:17:11.59+00:00","url":"https://junglewise.ai/threats/cve-2025-41769-phoenix-contact-plcnext-profinet-buffer-overflow"},{"cve":"CVE-2026-7849","cvss":9.8,"slug":"cve-2026-7849-phoenix-contact-charx-sec-command-injection-in-system","title":"Phoenix Contact CHARX SEC command injection in system configuration","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:59.443+00:00","url":"https://junglewise.ai/threats/cve-2026-7849-phoenix-contact-charx-sec-command-injection-in-system"},{"cve":"CVE-2026-44108","cvss":9.8,"slug":"cve-2026-44108-phoenix-contact-charx-sec-3xxx-firewall-bypass-during-shutdown","title":"Phoenix Contact CHARX SEC-3xxx firewall bypass during shutdown","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:59.307+00:00","url":"https://junglewise.ai/threats/cve-2026-44108-phoenix-contact-charx-sec-3xxx-firewall-bypass-during-shutdown"},{"cve":"CVE-2026-44107","cvss":7.5,"slug":"cve-2026-44107-phoenix-contact-charx-sec-charging-controller-unauthenticated","title":"Phoenix Contact CHARX SEC charging controller unauthenticated reboot via Modbus TCP","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:59.157+00:00","url":"https://junglewise.ai/threats/cve-2026-44107-phoenix-contact-charx-sec-charging-controller-unauthenticated"},{"cve":"CVE-2026-44106","cvss":7.8,"slug":"cve-2026-44106-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-init","title":"Phoenix Contact CHARX SEC-3xxx privilege escalation in init-script","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:59.027+00:00","url":"https://junglewise.ai/threats/cve-2026-44106-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-init"},{"cve":"CVE-2026-44105","cvss":6.6,"slug":"cve-2026-44105-phoenix-contact-charx-sec-3xxx-credential-exposure-in-log-files","title":"Phoenix Contact CHARX SEC-3xxx credential exposure in log files","severity":"medium","exploited":false,"published_at":"2026-07-30T07:16:58.897+00:00","url":"https://junglewise.ai/threats/cve-2026-44105-phoenix-contact-charx-sec-3xxx-credential-exposure-in-log-files"},{"cve":"CVE-2026-44104","cvss":9.8,"slug":"cve-2026-44104-phoenix-contact-charx-sec-firmware-update-signature-bypass","title":"Phoenix Contact CHARX SEC firmware update signature bypass","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.76+00:00","url":"https://junglewise.ai/threats/cve-2026-44104-phoenix-contact-charx-sec-firmware-update-signature-bypass"},{"cve":"CVE-2026-44103","cvss":5.3,"slug":"cve-2026-44103-phoenix-contact-charx-sec-firmware-integrity-bypass-in-jupicore","title":"Phoenix Contact CHARX SEC firmware integrity bypass in JupiCore","severity":"medium","exploited":false,"published_at":"2026-07-30T07:16:58.62+00:00","url":"https://junglewise.ai/threats/cve-2026-44103-phoenix-contact-charx-sec-firmware-integrity-bypass-in-jupicore"},{"cve":"CVE-2026-44102","cvss":5.3,"slug":"cve-2026-44102-phoenix-contact-charx-sec-race-condition-in-firmware-update","title":"Phoenix Contact CHARX SEC race condition in firmware update cleanup","severity":"medium","exploited":false,"published_at":"2026-07-30T07:16:58.487+00:00","url":"https://junglewise.ai/threats/cve-2026-44102-phoenix-contact-charx-sec-race-condition-in-firmware-update"},{"cve":"CVE-2026-44101","cvss":9.8,"slug":"cve-2026-44101-phoenix-contact-charx-sec-3xxx-missing-authentication-in-ocpp","title":"Phoenix Contact CHARX SEC-3xxx missing authentication in OCPP Agent","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.357+00:00","url":"https://junglewise.ai/threats/cve-2026-44101-phoenix-contact-charx-sec-3xxx-missing-authentication-in-ocpp"},{"cve":"CVE-2026-44100","cvss":9.4,"slug":"cve-2026-44100-phoenix-contact-charx-sec-jupicore-missing-authentication","title":"Phoenix Contact CHARX SEC JupiCore missing authentication","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.22+00:00","url":"https://junglewise.ai/threats/cve-2026-44100-phoenix-contact-charx-sec-jupicore-missing-authentication"},{"cve":"CVE-2026-44099","cvss":7.8,"slug":"cve-2026-44099-phoenix-contact-charx-sec-privilege-escalation-in-system","title":"Phoenix Contact CHARX SEC privilege escalation in system configuration","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:58.083+00:00","url":"https://junglewise.ai/threats/cve-2026-44099-phoenix-contact-charx-sec-privilege-escalation-in-system"},{"cve":"CVE-2026-44098","cvss":8.6,"slug":"cve-2026-44098-phoenix-contact-charx-sec-os-command-injection-in-ocpp-backend","title":"Phoenix Contact CHARX SEC OS command injection in OCPP backend","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.95+00:00","url":"https://junglewise.ai/threats/cve-2026-44098-phoenix-contact-charx-sec-os-command-injection-in-ocpp-backend"},{"cve":"CVE-2026-44097","cvss":7.1,"slug":"cve-2026-44097-phoenix-contact-charx-sec-unrestricted-file-upload-in-firmware","title":"Phoenix Contact CHARX SEC unrestricted file upload in firmware REST endpoint","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.813+00:00","url":"https://junglewise.ai/threats/cve-2026-44097-phoenix-contact-charx-sec-unrestricted-file-upload-in-firmware"},{"cve":"CVE-2026-44096","cvss":7.8,"slug":"cve-2026-44096-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-udhcpc","title":"Phoenix Contact CHARX SEC-3xxx privilege escalation in udhcpc","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.677+00:00","url":"https://junglewise.ai/threats/cve-2026-44096-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-udhcpc"},{"cve":"CVE-2026-44095","cvss":7.8,"slug":"cve-2026-44095-phoenix-contact-charx-sec-privilege-escalation-in-network-script","title":"Phoenix Contact CHARX SEC privilege escalation in network script","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.54+00:00","url":"https://junglewise.ai/threats/cve-2026-44095-phoenix-contact-charx-sec-privilege-escalation-in-network-script"},{"cve":"CVE-2026-44094","cvss":8.6,"slug":"cve-2026-44094-phoenix-contact-charx-sec-insecure-firmware-fallback","title":"Phoenix Contact CHARX SEC insecure firmware fallback","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.403+00:00","url":"https://junglewise.ai/threats/cve-2026-44094-phoenix-contact-charx-sec-insecure-firmware-fallback"},{"cve":"CVE-2026-44093","cvss":7.8,"slug":"cve-2026-44093-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-init","title":"Phoenix Contact CHARX SEC-3xxx privilege escalation in init-script","severity":"high","exploited":false,"published_at":"2026-07-30T07:16:57.26+00:00","url":"https://junglewise.ai/threats/cve-2026-44093-phoenix-contact-charx-sec-3xxx-privilege-escalation-in-init"},{"cve":"CVE-2026-44092","cvss":9.1,"slug":"cve-2026-44092-phoenix-contact-charx-sec-3xxx-crlf-injection-in-modbusserver","title":"Phoenix Contact CHARX SEC-3xxx CRLF injection in ModbusServer","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:57.11+00:00","url":"https://junglewise.ai/threats/cve-2026-44092-phoenix-contact-charx-sec-3xxx-crlf-injection-in-modbusserver"},{"cve":"CVE-2026-44091","cvss":9.1,"slug":"cve-2026-44091-phoenix-contact-charx-sec-trust-boundary-violation-in-mqtt-broker","title":"Phoenix Contact CHARX SEC trust boundary violation in MQTT Broker","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:56.963+00:00","url":"https://junglewise.ai/threats/cve-2026-44091-phoenix-contact-charx-sec-trust-boundary-violation-in-mqtt-broker"},{"cve":"CVE-2026-44090","cvss":9.8,"slug":"cve-2026-44090-phoenix-contact-charx-sec-missing-authentication-in-mqtt-broker","title":"Phoenix Contact CHARX SEC missing authentication in MQTT broker","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:56.81+00:00","url":"https://junglewise.ai/threats/cve-2026-44090-phoenix-contact-charx-sec-missing-authentication-in-mqtt-broker"},{"cve":"CVE-2026-41032","cvss":7.5,"slug":"cve-2026-41032-phoenix-contact-charx-sec-3xxx-unauthenticated-log-download","title":"Phoenix Contact CHARX SEC-3xxx unauthenticated log download","severity":"high","exploited":false,"published_at":"2026-06-03T11:16:19.54+00:00","url":"https://junglewise.ai/threats/cve-2026-41032-phoenix-contact-charx-sec-3xxx-unauthenticated-log-download"}],"vendor":{"hub":true,"name":"Phoenix Contact","slug":"phoenix-contact","homepage":"https://www.phoenixcontact.com/","description":"A German manufacturer of industrial automation, interconnection, and interface solutions.","url":"https://junglewise.ai/threats/vendors/phoenix-contact"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":8,"exploited":0,"vulnerabilities":20},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-41769","cvss":9.8,"epss":0.0084,"slug":"cve-2025-41769-phoenix-contact-plcnext-profinet-buffer-overflow","title":"Phoenix Contact PLCnext PROFINET buffer overflow","severity":"critical","exploited":false,"published_at":"2026-08-12T08:17:11.59+00:00","url":"https://junglewise.ai/threats/cve-2025-41769-phoenix-contact-plcnext-profinet-buffer-overflow"},{"cve":"CVE-2026-7849","cvss":9.8,"slug":"cve-2026-7849-phoenix-contact-charx-sec-command-injection-in-system","title":"Phoenix Contact CHARX SEC command injection in system configuration","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:59.443+00:00","url":"https://junglewise.ai/threats/cve-2026-7849-phoenix-contact-charx-sec-command-injection-in-system"},{"cve":"CVE-2026-44108","cvss":9.8,"slug":"cve-2026-44108-phoenix-contact-charx-sec-3xxx-firewall-bypass-during-shutdown","title":"Phoenix Contact CHARX SEC-3xxx firewall bypass during shutdown","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:59.307+00:00","url":"https://junglewise.ai/threats/cve-2026-44108-phoenix-contact-charx-sec-3xxx-firewall-bypass-during-shutdown"},{"cve":"CVE-2026-44104","cvss":9.8,"slug":"cve-2026-44104-phoenix-contact-charx-sec-firmware-update-signature-bypass","title":"Phoenix Contact CHARX SEC firmware update signature bypass","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.76+00:00","url":"https://junglewise.ai/threats/cve-2026-44104-phoenix-contact-charx-sec-firmware-update-signature-bypass"},{"cve":"CVE-2026-44101","cvss":9.8,"slug":"cve-2026-44101-phoenix-contact-charx-sec-3xxx-missing-authentication-in-ocpp","title":"Phoenix Contact CHARX SEC-3xxx missing authentication in OCPP Agent","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.357+00:00","url":"https://junglewise.ai/threats/cve-2026-44101-phoenix-contact-charx-sec-3xxx-missing-authentication-in-ocpp"},{"cve":"CVE-2026-44090","cvss":9.8,"slug":"cve-2026-44090-phoenix-contact-charx-sec-missing-authentication-in-mqtt-broker","title":"Phoenix Contact CHARX SEC missing authentication in MQTT broker","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:56.81+00:00","url":"https://junglewise.ai/threats/cve-2026-44090-phoenix-contact-charx-sec-missing-authentication-in-mqtt-broker"},{"cve":"CVE-2026-44100","cvss":9.4,"slug":"cve-2026-44100-phoenix-contact-charx-sec-jupicore-missing-authentication","title":"Phoenix Contact CHARX SEC JupiCore missing authentication","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:58.22+00:00","url":"https://junglewise.ai/threats/cve-2026-44100-phoenix-contact-charx-sec-jupicore-missing-authentication"},{"cve":"CVE-2026-44092","cvss":9.1,"slug":"cve-2026-44092-phoenix-contact-charx-sec-3xxx-crlf-injection-in-modbusserver","title":"Phoenix Contact CHARX SEC-3xxx CRLF injection in ModbusServer","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:57.11+00:00","url":"https://junglewise.ai/threats/cve-2026-44092-phoenix-contact-charx-sec-3xxx-crlf-injection-in-modbusserver"},{"cve":"CVE-2026-44091","cvss":9.1,"slug":"cve-2026-44091-phoenix-contact-charx-sec-trust-boundary-violation-in-mqtt-broker","title":"Phoenix Contact CHARX SEC trust boundary violation in MQTT Broker","severity":"critical","exploited":false,"published_at":"2026-07-30T07:16:56.963+00:00","url":"https://junglewise.ai/threats/cve-2026-44091-phoenix-contact-charx-sec-trust-boundary-violation-in-mqtt-broker"},{"cve":"CVE-2026-27550","cvss":8.8,"epss":0.0292,"slug":"cve-2026-27550-pepperl-fuchs-ice2-ice3-command-injection-in-field-shadow","title":"Pepperl+Fuchs ICE2/ICE3 command injection in Field_Shadow_Password class","severity":"high","exploited":false,"published_at":"2026-09-16T08:16:37.487+00:00","url":"https://junglewise.ai/threats/cve-2026-27550-pepperl-fuchs-ice2-ice3-command-injection-in-field-shadow"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Phoenix Contact CHARX SEC-3000","slug":"charx-sec-3000","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/charx-sec-3000"},{"name":"Phoenix Contact CHARX SEC-3050","slug":"charx-sec-3050","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/charx-sec-3050"},{"name":"Phoenix Contact CHARX SEC-3100","slug":"charx-sec-3100","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/charx-sec-3100"},{"name":"Phoenix Contact CHARX SEC-3150","slug":"charx-sec-3150","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/charx-sec-3150"},{"name":"Phoenix Contact AXC F 1152","slug":"axc-f-1152","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/axc-f-1152"},{"name":"Phoenix Contact EPC 1522","slug":"epc-1522","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/epc-1522"}]}