Indicators of Compromise

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

CVEs: CVE-2026-44090

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability

CVEs: CVE-2026-44100

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

CVEs: CVE-2026-44094

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability

CVEs: CVE-2026-44097

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

CVEs: CVE-2026-44107

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-44093

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability

CVEs: CVE-2026-44104

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability

CVEs: CVE-2026-44101

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability

CVEs: CVE-2026-44095

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability

CVEs: CVE-2026-44096

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability

CVEs: CVE-2026-44105

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability

CVEs: CVE-2026-44092

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-7849

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability

CVEs: CVE-2026-44108

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 30

ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-44106

Zero Day Initiative →

GBHackers 📡 RSS Jul 30

Claude Global Outage Hits Users With “529 Overloaded” Error Messages

Domains: api.anthropic.com

GBHackers →

GBHackers 📡 RSS Jul 30

Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw

CVEs: CVE-2026-10702

GBHackers →

GBHackers 📡 RSS Jul 30

Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code

CVEs: CVE-2026-66066

GBHackers →

SANS ISC 📡 RSS Jul 30

ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)

SANS ISC →

BleepingComputer 📡 RSS Jul 29

Cisco warns of FMC static credential flaw exploited in zero-day attacks

CVEs: CVE-2026-20316

BleepingComputer →