Skip to content
Phoenix Contact vulnerabilities
Products
Show 153 moreShow less
Newest
-
phoenix contact plcnext engineer
Path traversal in plug-in deployment
CVE-2026-110935
8.6 High
-
phoenix contact plcnext engineer
Signed plug-in validation bypass
CVE-2026-110022
8.6 High
-
phoenix contact plcnext engineer
Missing GSDX SignatureValue verification
CVE-2026-110021
6.9 Medium
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Remote code execution via uploading a malicious IODD file
CVE-2026-27565
9.8 Critical
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via PUT in /api/datastorage/data
CVE-2026-27564
7.2 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via GET in /api/datastorage/data
CVE-2026-27563
7.2 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via PUT in /api/iodd/config
CVE-2026-27562
7.2 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via GET in /api/iodd/config
CVE-2026-27561
7.2 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via DELETE in /api/status/data
CVE-2026-27560
7.2 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection via GET in /api/status/data
CVE-2026-27559
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
CVE-2026-27558
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Path Traversal in /index.php/view_uploaded_iodd_file
CVE-2026-27557
7.5 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Local File Inclusion in /index.php/ajax/save_iodd_parameters
CVE-2026-27556
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Local File Inclusion in /index.php/ajax/get_iodd_port_info
CVE-2026-27555
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/ajax/save_iodd_parameters
CVE-2026-27554
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Information Disclosure via Schema Path Manipulation
CVE-2026-27553
6.5 Medium
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Unauthorized IODD File Upload due to Improper Authorization
CVE-2026-27552
8.1 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/ajax/parameterManage
CVE-2026-27551
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in Field_Shadow_Password Class
CVE-2026-27550
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/attached_devices_tab/do_upload
CVE-2026-27549
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/ajax/get_iodd_port_info
CVE-2026-27548
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Command Injection in /index.php/ajax/get_iodd_menu_info
CVE-2026-27547
8.8 High
-
carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 more
Authentication Bypass in _account_log
CVE-2026-27546
9.8 Critical
-
phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +14 more +16 more
SQL injection
CVE-2025-41771
5.3 Medium
-
phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +14 more +16 more
Unauthenticated Denial of Service
CVE-2025-41770
8.7 High
-
phoenix contact axc f 1152, axc f 1252, axc f 2152 +12 more +14 more
Unauthenticated Buffer Overflow in PROFINET Service
CVE-2025-41769
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Command Injection in SCM (idledisconnect parameter)
CVE-2026-7849
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Firewall bypass during shutdown
CVE-2026-44108
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Exposed Reboot via Modbus
CVE-2026-44107
8.7 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Cleartext password in logs
CVE-2026-44105
5.8 Medium
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
CVE-2026-44106
8.5 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
ControllerAgent does not perform validation of firmware
CVE-2026-44104
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
JupiCore does not perform validation of firmware
CVE-2026-44103
6.9 Medium
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
OCPP Firmware download is not properly locked
CVE-2026-44102
6.9 Medium
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
OCPP reconfiguration vulnerability
CVE-2026-44101
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
JupiCore charging point reconfiguration without auth
CVE-2026-44100
8.8 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Local Privilege Escalation via pppd password injection
CVE-2026-44099
8.5 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
OS Command Injection in OCPP Agent via charge_box_id
CVE-2026-44098
8.8 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
File Upload vulnerability
CVE-2026-44097
5.3 Medium
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
udhcpc Privilege Escalation
CVE-2026-44096
8.5 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Local Privilege Escalation via Network scripts
CVE-2026-44095
8.5 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Fallback to second RAUC slot with default credentials
CVE-2026-44094
8.3 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script
CVE-2026-44093
8.5 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Missing input validation / stripping of CRLF characters in SystemConfigManager
CVE-2026-44092
8.8 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Creation of a new configuration by posting a malicious ID to MQTT
CVE-2026-44091
8.8 High
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Missing authentication for MQTT Broker
CVE-2026-44090
9.3 Critical
-
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more
Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
CVE-2026-41032
7.5 High
-
phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +11 more +13 more
Insufficient Verification of Data Authenticity
CVE-2025-41669
8.7 High
-
phoenix contact axc f 1152, axc f 1252, axc f 2000 ea +11 more +13 more
Untrusted Search Path
CVE-2025-41670
8.7 High
-
phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +70 more +72 more
Phoenix Contact: Improper removal of sensitive information in MGUARD products
CVE-2024-43384
8.0 High
- Show olderLoading…