Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Moxa vulnerabilities

137 published CVEs name Moxa among the affected products.

Published CVEs
137
Last 12 months
23
Critical
25
Known exploited
0

Critical 25High 66Medium 41Low 4Not scored 1

CVEs per yearBy the year they were published

  1. 201712
  2. 20188
  3. 20194
  4. 20207
  5. 20216
  6. 20229
  7. 202338
  8. 202415
  9. 202519
  10. 202619

Newest CVEs

  • CVE-2026-111548

    A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker…

    Moxa · NPort W2150A-W4/W2250A-W4 Series

    Medium5.3
  • CVE-2026-111461

    SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

    Moxa · OnCell G3150A-LTE Series

    High7.5
  • CVE-2026-111460

    Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series

    Moxa · OnCell G3150A-LTE Series

    High7.7
  • CVE-2026-111459

    Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

    Moxa · Moxa Remote Connect Suite (MRC Client)

    High7.6
  • CVE-2026-109813

    Shared Hard-coded Root CA Private Key

    Moxa · AIG-302 Series

    High8.6
  • CVE-2026-109812

    Missing Authorization on Secret Endpoints

    Moxa · AIG-302 Series

    Medium6.9
  • CVE-2026-86326

    An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic…

    Moxa · MGate MB3170 Series

    High8.6
  • CVE-2026-86325

    A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length…

    Moxa · MGate MB3170 Series

    Critical9.4
  • CVE-2026-15579

    An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login…

    Moxa · TN-4500B Series

    High8.8
  • CVE-2026-10831

    Improper Authorization of Break Signal Commands in Devices

    Moxa · NPort 6000 Series

    Medium6.9