Phoenix Contact vulnerabilities
193 CVEs and advisories name Phoenix Contact as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44106Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
- CVE-2026-44104ControllerAgent does not perform validation of firmware
- CVE-2026-44103JupiCore does not perform validation of firmware
- CVE-2026-44102OCPP Firmware download is not properly locked
- CVE-2026-44101OCPP reconfiguration vulnerability
- CVE-2026-44100JupiCore charging point reconfiguration without auth
- CVE-2026-44099Local Privilege Escalation via pppd password injection
- CVE-2026-44098OS Command Injection in OCPP Agent via charge_box_id
- CVE-2026-44097File Upload vulnerability
- CVE-2026-44096udhcpc Privilege Escalation
- CVE-2026-44095Local Privilege Escalation via Network scripts
- CVE-2026-44094Fallback to second RAUC slot with default credentials
- CVE-2026-44093Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script
- CVE-2026-44092Missing input validation / stripping of CRLF characters in SystemConfigManager
- CVE-2026-44091Creation of a new configuration by posting a malicious ID to MQTT
- CVE-2026-44090Missing authentication for MQTT Broker
- CVE-2026-41032Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
- CVE-2025-41669Insufficient Verification of Data Authenticity
- CVE-2025-41670Untrusted Search Path
- CVE-2024-43384Phoenix Contact: Improper removal of sensitive information in MGUARD products
- CVE-2026-22323Cross‑Site Request Forgery in Link Aggregation Configuration
- CVE-2026-22322Stored Cross‑Site Scripting in Link Aggregation Name Handling
- CVE-2026-22321Stack-Based Buffer Overflow in CLI Login Username Handling over CLI
- CVE-2026-22320Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
- CVE-2026-22319Stack-Based Buffer Overflow in File Install Parameter Handling
- CVE-2026-22318Stack-Based Buffer Overflow in File Transfer Parameter Handling
- CVE-2026-22317Command Injection Vulnerability in Root CA Certificate Transfer Workflow
- CVE-2026-22316Buffer Overflow using TFTP Filename
- CVE-2025-41717Config-Upload Code Injection
- CVE-2025-41693Authenticated Denial-of-Service via SSH