CVE-2026-44104

CRITICAL

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 7/30/2026Modified: 7/30/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-44104 — The firmware update process for the basemodule of the charging controller only v...

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.

CVE-2026-44104
NIST NVD

References (1)

https://www.certvde.com/en/advisories/VDE-2026-008/