Moxa vulnerabilities
137 CVEs and advisories name Moxa as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-111548A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers.
- CVE-2026-111461SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
- CVE-2026-111460Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
- CVE-2026-111459Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
- CVE-2026-109813Shared Hard-coded Root CA Private Key
- CVE-2026-109812Missing Authorization on Secret Endpoints
- CVE-2026-86326An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify th
- CVE-2026-86325A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface.
- CVE-2026-15579An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length dur
- CVE-2026-10831Improper Authorization of Break Signal Commands in Devices
- CVE-2026-10829A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier.
- CVE-2026-10828A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W
- CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of Service
- CVE-2026-9266A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and contr
- CVE-2026-3868An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router.
- CVE-2026-3867An improper ownership management vulnerability has been identified in Moxa’s Secure Router.
- CVE-2026-4483An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x
- CVE-2026-0715Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device.
- CVE-2026-0714A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Li
- CVE-2025-15017A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface.
- CVE-2025-2026The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null
- CVE-2025-1977The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authen
- CVE-2025-9315Unauthenticated Device Registration Vulnerability in MXsecurity Series
- CVE-2025-1680An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows att
- CVE-2025-1679Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malici
- CVE-2025-6950An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers.
- CVE-2025-6949An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.
- CVE-2025-6894An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.
- CVE-2025-6893An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers.
- CVE-2025-6892An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers.