CVE Catalog
CVE-2026-44101
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.40%
33th percentile - higher than 33% of all known CVEs
Summary
The CHARX OCPP Agent service lacks authentication, allowing an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and disclosure of confidential data.
Risk Assessment
Risk includes service disruption and leakage of confidential data to an unauthorized attacker.
Recommendation
Implement authentication for the CHARX OCPP Agent service and restrict access to trusted hosts only.
Original NVD description (English source)
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker.