Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a… (CVE-2026-44090)
CVE-2026-44090 is a critical vulnerability in Phoenix Contact CHARX SEC-3150 devices caused by missing authentication on the MQTT broker. This allows unauthenticated remote attackers to access the broker and potentially cause denial-of-service conditions. The vulnerability can be exploited by network-adjacent attackers without any authentication. No patch or official fix information is currently available.
AI Analysis
Technical Summary
The vulnerability CVE-2026-44090 affects Phoenix Contact CHARX SEC-3150 devices where the MQTT broker lacks authentication controls. This flaw permits unauthenticated remote attackers to connect to the MQTT broker, which is only protected by network access restrictions, and potentially disrupt service availability. The vulnerability is rated critical based on its impact on confidentiality, integrity, and availability, and the ease of exploitation without authentication. No remediation or patch has been disclosed yet.
Potential Impact
An unauthenticated remote attacker can access the MQTT broker on affected devices, potentially leading to denial-of-service conditions. The vulnerability affects confidentiality, integrity, and availability of the MQTT service. Exploitation does not require authentication and can be performed by attackers with network adjacency.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network-level protections such as restricting access to the MQTT broker to trusted hosts and network segments are recommended to reduce exposure.
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a… (CVE-2026-44090)
Description
CVE-2026-44090 is a critical vulnerability in Phoenix Contact CHARX SEC-3150 devices caused by missing authentication on the MQTT broker. This allows unauthenticated remote attackers to access the broker and potentially cause denial-of-service conditions. The vulnerability can be exploited by network-adjacent attackers without any authentication. No patch or official fix information is currently available.
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-44090 affects Phoenix Contact CHARX SEC-3150 devices where the MQTT broker lacks authentication controls. This flaw permits unauthenticated remote attackers to connect to the MQTT broker, which is only protected by network access restrictions, and potentially disrupt service availability. The vulnerability is rated critical based on its impact on confidentiality, integrity, and availability, and the ease of exploitation without authentication. No remediation or patch has been disclosed yet.
Potential Impact
An unauthenticated remote attacker can access the MQTT broker on affected devices, potentially leading to denial-of-service conditions. The vulnerability affects confidentiality, integrity, and availability of the MQTT service. Exploitation does not require authentication and can be performed by attackers with network adjacency.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network-level protections such as restricting access to the MQTT broker to trusted hosts and network segments are recommended to reduce exposure.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9h9r-3q9w-h7vj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-44090"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 4.0
Threat ID: 6a6b72bc9c2644c7f847454b
Added to database: 07/30/2026, 15:50:20 UTC
Last enriched: 08/15/2026, 05:13:16 UTC
Last updated: 09/13/2026, 22:01:34 UTC
Views: 77
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.