CVE-2026-44107

highCVSS 7.5covered by 1 sourcefirst seen 2026-07-30

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.

⚡ Watch CVE-2026-44107

Get an email if CVE-2026-44107 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-44107: A reboot of the charging controller can be triggered via Modbus TCP without authentication. Th…nvd · 2026-07-30

External references

NVD record for CVE-2026-44107

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-44107 status](https://www.csirts.com/badge/CVE-2026-44107)](https://www.csirts.com/cve/CVE-2026-44107)