← Back to feed
advisories Zero Day Initiative

ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability

Zero Day Initiative

This vulnerability allows network-adjacent attackers to access internal resources on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authen...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 24 advisories DOUBLECUP's PNG Payload, (Mon, Aug 24th) SANS ISC · Aug 24 advisories ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability Zero Day Initiative · Aug 24