CVE-2026-44093

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.

Score

CVSS 4.0 8.5 High

Status

Deferred - info@cert.vde.com

Published

2026-07-30

Last modified

2026-10-23

Weaknesses

CWE-78

Affected products

• Charx Sec 3000 (Phoenix Contact)
• Charx Sec 3050 (Phoenix Contact)
• Charx Sec 3100 (Phoenix Contact)
• Charx Sec 3150 (Phoenix Contact)

References

• https://www.certvde.com/en/advisories/VDE-2026-008/