← Back to feed
advisories Zero Day Initiative

ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

Zero Day Initiative

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentic...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th) SANS ISC · Sep 24 advisories Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators CISA Advisories · Sep 23 advisories ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23