CVE-2026-44091 is a critical security vulnerability classified as CWE-501 (Trust Boundary Violation) affecting Phoenix Contact CHARX SEC-3150 devices at version 1.0.0. This flaw enables attackers with network adjacency to bypass authentication controls and gain unauthorized access to internal resources. The vulnerability has been assigned a CVSS 4.0 base score of 8.8, reflecting its high severity and potential impact. Currently, there is no vendor-provided patch or official remediation guidance available, and no active exploitation has been reported.

The vulnerability allows unauthenticated network-adjacent attackers to access internal resources on affected devices, potentially compromising confidentiality and integrity of those resources. Given the high CVSS score and classification as a trust boundary violation, successful exploitation could lead to significant unauthorized access within the device environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is documented, users should monitor Phoenix Contact communications for updates. Until a fix is available, restrict network access to the affected device to trusted sources only and consider network segmentation to limit exposure.