Do Son Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.
Moxa
Moxa MGate vulnerabilities CVE-2026-86325 (CVSS 9.4) and CVE-2026-86326 hit MGate protocol gateway firmware. See affected versions and fixes.
A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.
Learn about the new Moxa Linux kernel vulnerabilities (CVE-2026-43284). Discover how to apply interim mitigations to prevent privilege escalation.
Moxa warns of critical auth bypass (CVE-2024-12297, CVSS 9.2) in industrial switches. Flaw allows brute-force attacks. Patch TN-series devices now.
Critical OpenSSH flaw (CVE-2023-38408) hits Moxa EDS & RKS switches. CVSS 9.8. Remote attackers can execute code. Contact support for patches now.
Moxa patched five critical flaws in its industrial routers, including a CVE-2025-6950 (CVSS 9.9) bug where hard-coded JWT credentials allow unauthenticated attackers to impersonate any user. Update to v3.21.
Moxa warns of a high-severity DoS flaw (CVE-2024-9404) in PT-G7728/7828 industrial switches, allowing remote crashes. Update firmware or disable affected services.
Learn about CVE-2025-0415 and its critical impact on Moxa secure routers. Protect your devices from potential exploitation.
Learn about CVE-2025-0676 and the security risks posed by Moxa routers. Protect your network from potential exploits.
CVE-2024-9404 reveals a serious DoS vulnerability in Moxa PT switches. Discover the risks and affected models now.
Learn about the critical vulnerability CVE-2024-12297 affecting Moxa's EDS-508A Series Ethernet switches. Discover the potential risks and how to mitigate them.
Critical vulnerabilities identified in Moxa's routers and network security appliances. Find out how CVE-2024-9140 and CVE-2024-9138 pose a risk to your infrastructure and data security.
Don't overlook the critical flaws in Moxa's systems. Dive into the details of CVE-2024-9137 and CVE-2024-9139 and the potential risks they bring