Is CVE-2026-44104 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-44104?

CVE-2026-44104 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-44104

Description

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.