CVE-2026-44107CWE-749

Exposed Reboot via Modbus

High · published July 30, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00560 · 45.8th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2026-07-30T06:53Z
EPSS history
Timeline
  • 30 JUL 06:53Z
    Exposed Reboot via Modbus
    cvelistv5