Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

CHARX OCPP Agent Service Allows Unauthenticated Backend Configuration

CVE-2026-44101 · published 3 months ago
Summary

An attacker can access and change the CHARX OCPP Agent service settings without a password, potentially disrupting service and exposing sensitive information. This is a concern because it could allow an attacker to interrupt your business operations or steal confidential data. To protect your system, ensure the CHARX OCPP Agent service is properly configured with authentication and access controls in place.

Original advisory text
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data ...
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published30 Jul 2026
Updated7 Nov 2026
First seen30 Jul 2026
Sources
CVE-2026-44101 · NVD
Track software like this
Free during beta