The vulnerability identified as CVE-2026-44107 affects Phoenix Contact CHARX SEC-3150 charging controllers, specifically version 1.0.0. An unauthenticated attacker can exploit an exposed dangerous method or function accessible via Modbus TCP to remotely trigger a reboot of the device. This results in a denial-of-service condition by interrupting the charging controller's operation. The vulnerability is classified under CWE-749 (Exposed Dangerous Method or Function). The CVSS 4.0 base score is 8.7, indicating high severity, with attack vector network, no required privileges or user interaction, and high impact on availability.

Successful exploitation causes the charging controller to reboot unexpectedly, leading to denial of service and disruption of charging operations. There is no indication of data confidentiality or integrity impact. The device becomes unavailable until it restarts, which could affect dependent systems or processes relying on the charging controller.

No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates. Until a fix is released, consider disabling the Modbus TCP service if it is not required, or restrict network access to the Modbus service to trusted hosts only to reduce exposure.