CVE-2026-44096 Phoenix Contact CVE debrief

Who should care

System administrators and security teams responsible for systems using udhcpc should be aware of this vulnerability and take immediate action to mitigate the risk. They should review system configurations, assess potential impact, and prioritize patching or mitigation efforts. Additionally, security teams should monitor for suspicious activity and implement compensating controls where necessary.

Technical summary

CVE-2026-44096 is a high-severity privilege escalation vulnerability in udhcpc. A local user 'charx-web' can exploit this vulnerability to execute arbitrary commands as root, leading to full system compromise. The vulnerability has a CVSS score of 8.5 and is classified as HIGH severity. Affected systems should be identified and prioritized for patching or mitigation. System administrators should review the vulnerability details and assess the potential impact on their environments.

Defensive priority

High priority due to local privilege escalation vulnerability allowing arbitrary command execution as root.

Recommended defensive actions

• Apply patches or updates for udhcpc as soon as available
• Restrict access to udhcpc to prevent local exploitation
• Monitor system logs for suspicious activity related to udhcpc
• Consider implementing additional security controls for systems using udhcpc
• Review compensating controls for exposed systems while remediation is scheduled and verified

Evidence notes

Evidence from official CVE and NVD sources indicates a high-severity vulnerability in udhcpc, allowing a local user 'charx-web' to execute arbitrary commands as root. Limited details are available about affected products and versions. Defenders should verify system configurations, review logs for suspicious activity, and monitor for patches or updates from the vendor. The CVE record was published on 2026-07-30T07:16:57.677Z and has not been modified since then.

Official resources