ZDI-CAN-29085: ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

Published Jul 30, 2026

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-44106.

Affected Software

1 affected component

Phoenix Contact CHARX SEC-3150

Event History

Jul 30, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-29085?

ZDI-CAN-29085 has a risk rating of 46, indicating a certain level of severity due to the potential for local privilege escalation.

How do I fix ZDI-CAN-29085?

To mitigate ZDI-CAN-29085, ensure that you apply the latest firmware updates from Phoenix Contact for the CHARX SEC-3150 device.

Who is affected by ZDI-CAN-29085?

ZDI-CAN-29085 affects installations of Phoenix Contact CHARX SEC-3150 devices that allow local code execution.

Can ZDI-CAN-29085 be exploited remotely?

No, ZDI-CAN-29085 requires local access to the system to exploit the privilege escalation vulnerability.

What type of vulnerability is ZDI-CAN-29085?

ZDI-CAN-29085 is a local privilege escalation vulnerability affecting user applications on Phoenix Contact CHARX SEC-3150 devices.