CVE-2026-44105
Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: CERT VDE

Description
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local attacker with access to the logs to authenticate via SSH as the limited user "user-app". Charging could be interrupted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-10-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-10-18
NVD
CVE-2026-44105
EUVD
EUVD-2026-51041

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Phoenix Contact CHARX SEC-3150 1.0.0
Phoenix Contact CHARX SEC-3100 1.0.0
Phoenix Contact CHARX SEC-3050 1.0.0
Phoenix Contact CHARX SEC-3000 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-532 The product writes sensitive information to a log file.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves credentials for the local user 'user-app' being exposed in log files. A low-privileged local attacker with access to these logs could use them to authenticate via SSH as the limited user 'user-app', potentially interrupting charging processes.

Detection Guidance

Check log files for entries containing credentials of the local user 'user-app'. Search for patterns like passwords or authentication tokens in logs using commands like 'grep -r "user-app" /var/log/' or 'journalctl | grep -i "password"'.

Impact Analysis

If you are a user or administrator with this system, an attacker could gain unauthorized access to the 'user-app' account. This could lead to data breaches, service disruptions, or further lateral movement within the network depending on the account's privileges.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Organizations may face legal penalties, reputational damage, and loss of compliance certifications if such breaches occur.

Mitigation Strategies

Rotate the credentials for the 'user-app' account immediately. Review and sanitize log files to remove any exposed credentials. Restrict log file access to authorized personnel only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44105. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart