← All Advisories

CVE-2026-41032

Last refreshed2026-10-06

Status: UPDATED  |  Advisory ID: CVE-2026-41032

Key Details

CVECVE-2026-41032
CVSS Score / Version7.5 (High) / CVSS v3.1
Updated2026-07-22
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Proseattack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected productsPhoenix Contact CHARX SEC-3150, Phoenix Contact CHARX SEC-3100, Phoenix Contact CHARX SEC-3050, and Phoenix Contact CHARX SEC-3000
Classified asCWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Phoenix ContactCHARX SEC-3150
Phoenix ContactCHARX SEC-3100
Phoenix ContactCHARX SEC-3050
Phoenix ContactCHARX SEC-3000
SubsystemsGeneral OT
SectorsMultiple

What to Know

It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.

What to Do

Monitor Phoenix Contact's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41032
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41032

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE