Is CVE-2026-44102 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-44102?

CVE-2026-44102 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-44102

Description

An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid firmware file. This will cause the file to remain accessible for a short period before it is deleted due to improper locking during the cleanup process.