Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

Charx Modbus Server: Unauthenticated Reboot via Modbus TCP

CVE-2026-44107 · published 3 months ago
Summary

If the Modbus server is enabled, an attacker can remotely restart the charging controller without a password. This can cause downtime and disrupt operations. To prevent this, ensure that the Modbus server is disabled or properly secured with authentication.

Original advisory text
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listeni...
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-749Exposed Dangerous Method or Function
Timeline
Published30 Jul 2026
Updated4 Nov 2026
First seen30 Jul 2026
Sources
CVE-2026-44107 · NVD
Track software like this
Free during beta