| CVE-2026-7849 |
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command…
|
9.3
Critical
|
Jul 30, 2026 |
| CVE-2026-44108 |
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system…
|
9.3
Critical
|
Jul 30, 2026 |
| CVE-2026-44107 |
A reboot of the charging controller can be triggered via Modbus TCP without authentication
|
8.7
High
|
Jul 30, 2026 |
| CVE-2026-44105 |
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local…
|
5.8
Medium
|
Jul 30, 2026 |
| CVE-2026-44106 |
A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-44104 |
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without…
|
9.3
Critical
|
Jul 30, 2026 |
| CVE-2026-44103 |
An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the…
|
6.9
Medium
|
Jul 30, 2026 |
| CVE-2026-44102 |
An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid…
|
6.9
Medium
|
Jul 30, 2026 |
| CVE-2026-44101 |
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure…
|
9.3
Critical
|
Jul 30, 2026 |
| CVE-2026-44100 |
The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points
|
8.8
High
|
Jul 30, 2026 |
| CVE-2026-44099 |
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-44098 |
This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to…
|
8.8
High
|
Jul 30, 2026 |
| CVE-2026-44097 |
A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for…
|
5.3
Medium
|
Jul 30, 2026 |
| CVE-2026-44096 |
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root,…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-44095 |
A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-44094 |
An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure…
|
8.3
High
|
Jul 30, 2026 |
| CVE-2026-44093 |
A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-44092 |
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not…
|
8.8
High
|
Jul 30, 2026 |
| CVE-2026-44091 |
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new…
|
8.8
High
|
Jul 30, 2026 |
| CVE-2026-44090 |
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected…
|
9.3
Critical
|
Jul 30, 2026 |
| CVE-2026-41032 |
It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some…
|
7.5
High
|
Jun 3, 2026 |
| CVE-2025-41699 |
An low privileged remote attacker with an account for the Web-based management can change the system configuration to…
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-25271 |
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-25270 |
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with…
|
9.8
Critical
|
Jul 8, 2025 |
| CVE-2025-25269 |
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege…
|
8.4
High
|
Jul 8, 2025 |