ZDI-CAN-29076: ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

Published Jul 30, 2026

Updated

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-44094.

Affected Software

1 affected component

Phoenix Contact CHARX SEC-3150

Event History

Jul 30, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-29076?

The severity of ZDI-CAN-29076 is rated at 7.5 based on the CVSS score.

How do I fix ZDI-CAN-29076?

To mitigate ZDI-CAN-29076, it is recommended to apply any available patches or updates from Phoenix Contact.

What devices are affected by ZDI-CAN-29076?

ZDI-CAN-29076 affects installations of Phoenix Contact CHARX SEC-3150 devices.

Can ZDI-CAN-29076 be exploited remotely?

Yes, ZDI-CAN-29076 can be exploited by network-adjacent attackers without requiring authentication.

What is the potential impact of ZDI-CAN-29076?

The potential impact of ZDI-CAN-29076 includes unauthorized access to systems and possible compromise of the affected devices.