Is CVE-2026-44101 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-44101?

CVE-2026-44101 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-44101

Description

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker.