Local Privilege Escalation in User-Applications Init-Script Affecting Vendor Software
CVE-2026-44093

8.5HIGH

Key Information:

Vendor

Phoenix Contact

Status
Charx Sec-3150
Charx Sec-3100
Charx Sec-3050
Charx Sec-3000
Vendor
CVE Published:
30 July 2026

What is CVE-2026-44093?

A local privilege escalation vulnerability has been identified in the init-script for user applications, which permits a low-privileged user to execute arbitrary commands with root privileges. This can lead to a complete compromise of the affected system, exposing the environment to further malicious activities and potential data breaches. It is essential for organizations to assess their systems for this vulnerability to mitigate risks associated with unauthorized access.

Affected Version(s)

CHARX SEC-3000 1.0.0 < 1.9.1

CHARX SEC-3050 1.0.0 < 1.9.1

CHARX SEC-3100 1.0.0 < 1.9.1

References

https://www.certvde.com/en/advisories/VDE-2026-008/

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ZDI
.