Privilege Escalation Vulnerability in udhcpc by the Vendor
CVE-2026-44096

8.5HIGH

Key Information:

Vendor: Phoenix Contact
Status: Charx Sec-3150; Charx Sec-3100; Charx Sec-3050; Charx Sec-3000
Vendor: CVE Published:; 30 July 2026

🔔 Create Phoenix Contact Vulnerability Alert

What is CVE-2026-44096?

A vulnerability exists in udhcpc that allows a local user, specifically the user 'charx-web', to escalate their privileges and execute arbitrary commands with root-level access. This flaw can lead to a complete system compromise, allowing malicious actors to manipulate the affected environment without proper authorization. It is crucial for administrators to apply necessary patches and implement security measures to mitigate potential risks stemming from this vulnerability.

Affected Version(s)

CHARX SEC-3000 1.0.0 < 1.9.1

CHARX SEC-3050 1.0.0 < 1.9.1

CHARX SEC-3100 1.0.0 < 1.9.1

References

https://www.certvde.com/en/advisories/VDE-2026-008/

CVSS V4

Score:

8.5

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 30, 2026
Vulnerability Reserved
May 5, 2026

Credit

ZDI

CVE-2026-44096 Data

JSON