CVE-2026-44107 — Exposed Reboot via Modbus
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxMod…
Published: 2026-07-30 · CVSS: 8.7 · CVSS 4.0
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7