CVE-2026-44101 affects Phoenix Contact CHARX SEC-3150 devices, where a critical function lacks authentication controls, enabling network-adjacent attackers to modify device configurations without credentials. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function). It has a CVSS 4.0 base score of 9.3, reflecting critical severity with network attack vector, low attack complexity, and no privileges or user interaction required. No official patch or remediation guidance is currently available from the vendor, and no active exploitation has been observed.

An attacker with network adjacency can modify the device configuration without authentication, potentially leading to unauthorized changes that could disrupt device operation or compromise security. The high CVSS score (9.3) indicates a critical impact with high exploitability, but no known exploits have been reported in the wild.

No patch or official remediation is currently documented for this vulnerability. Organizations using affected versions should monitor vendor advisories for updates. Until a fix is available, restricting network access to the device and implementing network segmentation may reduce exposure, but these are general mitigations and not vendor-specified.