Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,625All CVEsplus 19,141 rejected
- 680Last 24 hours2,965 in the last 7 days
- 17,121Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 13 | 5 | 0 | 0 | 19 | 83 |
| 2025 | 6 | 8 | 4 | 0 | 1 | 19 | 64 |
| 2024 | 0 | 7 | 8 | 0 | 0 | 15 | 45 |
| 2023 | 2 | 14 | 11 | 3 | 0 | 30 | 30 |
| Title | ||
|---|---|---|
| CVE-2026-111548 | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker…Moxa · NPort W2150A-W4/W2250A-W4 Series | Medium5.3 |
| CVE-2026-111461 | SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE SeriesMoxa · OnCell G3150A-LTE Series | High7.5 |
| CVE-2026-111460 | Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE SeriesMoxa · OnCell G3150A-LTE Series | High7.7 |
| CVE-2026-111459 | Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)Moxa · Moxa Remote Connect Suite (MRC Client) | High7.6 |
| CVE-2026-109813 | Shared Hard-coded Root CA Private KeyMoxa · AIG-302 Series | High8.6 |
| CVE-2026-109812 | Missing Authorization on Secret EndpointsMoxa · AIG-302 Series | Medium6.9 |
| CVE-2026-86326 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic…Moxa · MGate MB3170 Series | High8.6 |
| CVE-2026-86325 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length…Moxa · MGate MB3170 Series | Critical9.4 |
| CVE-2026-15579 | An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login…Moxa · TN-4500B Series | High8.8 |
| CVE-2026-10831 | Improper Authorization of Break Signal Commands in DevicesMoxa · NPort 6000 Series | Medium6.9 |
| CVE-2026-10829 | A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from…Moxa · NPort W2150A-W4/W2250A-W4 Series | High8.6 |
| CVE-2026-10828 | A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version…Moxa · NPort W2150A-W4/W2250A-W4 Series | Medium6.9 |
| CVE-2026-10825 | Improper JSON Input Validation in WebSocket API Leads to Denial of ServiceMoxa · NPort 6000-G2 Series | High7.1 |
| CVE-2026-9266 | A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This…Moxa · UC-1200A Series | High7.0 |
| CVE-2026-3868 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length…Moxa · EDR-8010 Series | High8.7 |
| CVE-2026-3867 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged…Moxa · EDR-8010 Series | Medium6.0 |
| CVE-2026-4483 | An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The…Moxa · MxGeneralIo | High7.0 |
| CVE-2026-0715 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with…Moxa · UC-1200A Series | High7.0 |
| CVE-2026-0714 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the…Moxa · UC-1200A Series | High7.0 |
| CVE-2025-15017 | A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device…Moxa · NPort 5000AI-M12 Series | High7.0 |
| CVE-2025-2026 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection…Moxa · NPort 6100-G2/6200-G2 Series | High7.1 |
| CVE-2025-1977 | The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenticated user with…Moxa · NPort 6100-G2/6200-G2 Series | High7.7 |
| CVE-2025-9315 | Unauthenticated Device Registration Vulnerability in MXsecurity SeriesMoxa · MXsecurity Series | Medium6.3 |
| CVE-2025-1680 | An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with…Moxa · TN-4500A Series | None0.0 |
| CVE-2025-1679 | Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an…Moxa · TN-4500A Series | Medium4.8 |
| CVE-2025-6950 | An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret…Moxa · EDR-G9010 Series | Critical9.9 |
| CVE-2025-6949 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in…Moxa · EDR-G9010 Series | Critical9.3 |
| CVE-2025-6894 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization…Moxa · EDR-G9010 Series | Medium5.3 |
| CVE-2025-6893 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in broken access control…Moxa · EDR-G9010 Series | Critical9.3 |
| CVE-2025-6892 | An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism…Moxa · EDR-G9010 Series | High8.7 |
| CVE-2025-5191 | Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)Moxa · Utility for DRP-A100 Series | High7.3 |
| CVE-2025-0676 | Commend Injection Leading to Privilege EscalationMoxa · EDF-G1002-BP Series | High8.6 |
| CVE-2025-0415 | Command Injection in NTP SettingMoxa · EDF-G1002-BP Series | Critical9.2 |
| CVE-2024-7695 | Out-of-bounds Write VulnerabilityMoxa · PT-7728 Series | High8.7 |
| CVE-2025-0193 | Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 SeriesMoxa · MGate 5121 Series | Medium5.2 |
| CVE-2024-12297 | Frontend Authorization Logic Disclosure VulnerabilityMoxa · EDS-508A Series | Critical9.2 |
| CVE-2024-9140 | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS…Moxa · EDR-8010 Series | Critical9.3 |
| CVE-2024-9138 | Privilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesMoxa · EDR-810 Series | High8.6 |
| CVE-2024-9404 | Denial-of-Service VulnerabilityMoxa · VPort 07-3 Series | Medium6.9 |
| CVE-2024-4740 | MXsecurity Use of Hard-coded CredentialsMoxa · MXsecurity Series | Medium5.3 |
| CVE-2024-4739 | MXsecurity License Generation Function DisclosureMoxa · MXsecurity Series | Medium5.3 |
| CVE-2024-9139 | OS Command Injection in Restricted CommandMoxa · EDR-8010 Series | High8.6 |
| CVE-2024-9137 | Moxa Service Missing Authentication for Critical FunctionMoxa · EDR-8010 Series | High8.8 |
| CVE-2024-6787 | MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race ConditionMoxa · MXview One Series | Medium6.0 |
| CVE-2024-6786 | MXview One Series vulnerable to Path TraversalMoxa · MXview One Series | Medium6.0 |
| CVE-2024-6785 | MXview One and MXview One Central Manager Series store cleartext credentials in a local fileMoxa · MXview One Series | Medium6.8 |
| CVE-2024-4641 | OnCell G3470A-LTE Series: Authenticated Format String ErrorsMoxa · OnCell G3150A-LTE Series | Medium6.3 |
| CVE-2024-4640 | OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmailMoxa · OnCell G3150A-LTE Series | High7.1 |
| CVE-2024-4639 | OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSecMoxa · OnCell G3150A-LTE Series | High7.1 |
| CVE-2024-4638 | OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKeyMoxa · OnCell G3470A-LTE Series | High7.1 |