CVE-2026-44103 — JupiCore does not perform validation of firmware
An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing int…
Published: 2026-07-30 · CVSS: 6.9 · CVSS 4.0
An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This vulnerability could be used in chain with CVE-2026-44104.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7