moxa

Top products

The 15 most recently published vulnerabilities affecting moxa.

• CVE-2026-15579An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacke...Sep 18, 2026
• CVE-2026-10831Improper Authorization of Break Signal Commands in DevicesJun 16, 2026
• CVE-2026-10829A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supp...Jun 16, 2026
• CVE-2026-10828A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems ...Jun 16, 2026
• CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of ServiceJun 16, 2026
• CVE-2026-9266A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remed...Jun 12, 2026
• CVE-2026-3868An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management ...Apr 27, 2026
• CVE-2026-3867An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuratio...Apr 27, 2026
• CVE-2026-4483An exposed IOCTL with an  insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGeneralIo, expo...6.0Apr 8, 2026
• CVE-2026-0715Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use th...6.8Feb 5, 2026
• CVE-2026-0714A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU vi...6.8Feb 5, 2026
• CVE-2025-15017A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interf...6.8Dec 31, 2025
• CVE-2025-2026The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection through the device’s web API. This may ...Dec 31, 2025
• CVE-2025-1977The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenticated user with read-only access to perform unauthorize...8.8Dec 31, 2025
• CVE-2025-9315Unauthenticated Device Registration Vulnerability in MXsecurity SeriesDec 10, 2025