← Back to feed
advisories Zero Day Initiative

ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability

Zero Day Initiative

This vulnerability allows network-adjacent attackers to bypass firewall rules on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentica...

1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th) SANS ISC · Sep 24 advisories Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators CISA Advisories · Sep 23 advisories ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23