Moxa
Vulnerability activity for Moxa: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumOct 27, 2026Moxa NPort W2150A-W4/W2250A-W4 Series Memory corruptionCVE-2026-111548A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
- 7.5HighOct 27, 2026Moxa OnCell G3150A-LTE Series Code / command injectionCVE-2026-111461An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.1.4% likely
- 7.7HighOct 27, 2026Moxa OnCell G3150A-LTE Series Crypto / certificateCVE-2026-111460A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
- 7.6HighOct 27, 2026Moxa Remote Connect Suite (MRC Client) Crypto / certificateCVE-2026-111459An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
- 8.6HighOct 16, 2026Moxa AIG-302 Series Crypto / certificateCVE-2026-109813A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
- 6.9MediumOct 16, 2026Moxa AIG-302 Series Auth bypass / access controlCVE-2026-109812A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the dis
Top products
- OnCell G3150A-LTE Series2 CVEs in the last year
- AIG-302 Series2 CVEs in the last year
- NPort W2150A-W4/W2250A-W4 Series1 CVE in the last year
- Moxa Remote Connect Suite (MRC Client)1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 27, 2026[Control Systems] Moxa security advisory (AV26-1089)CVE-2026-111459CVE-2026-111460CVE-2026-111461
- CISA · Oct 20, 2026Moxa AIG-302 ThingsPro EdgeCVE-2026-109812CVE-2026-109813
- CCCS (Canada) · Oct 16, 2026[Control Systems] Moxa security advisory (AV26-1055)CVE-2026-109812CVE-2026-109813
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.