CVE-2026-44103 is a critical vulnerability that allows an unauthenticated remote attacker to inject malicious firmware into the internal charging module. This occurs because the JupiCore service transmits firmware updates without integrity or verification checks, enabling unrestricted upload of malicious files. Exploitation compromises the device's integrity. No patch or remediation information is currently available.