# Moxa vulnerabilities Source: https://junglewise.ai/threats/vendors/moxa Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/moxa.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 15 vulnerabilities in Moxa: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-111548, was published on 27 October 2026. 6 vulnerabilities in the last four weeks, up 100% on the four before (3). 4 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 6 - Last 90 days: 9 - All time: 15 (0 critical, 0 exploited in the wild) ## About Moxa A manufacturer of industrial networking, computing, and automation solutions. ## Latest Moxa vulnerabilities - [CVE-2026-111548: Moxa wireless device servers stack buffer overflow in web management](https://junglewise.ai/threats/cve-2026-111548-a-stack-based-buffer-overflow-vulnerability-exists-in-the-web) (info, published 27 Oct 2026) - [CVE-2026-111461: Moxa OnCell G3150A-LTE OS command injection in SMS management](https://junglewise.ai/threats/cve-2026-111461-an-os-command-injection-vulnerability-exists-in-oncell-g3150a) (info, published 27 Oct 2026) - [CVE-2026-111460: Moxa OnCell G3150A-LTE hard-coded cryptographic key](https://junglewise.ai/threats/cve-2026-111460-a-hard-coded-cryptographic-key-vulnerability-exists-in-the) (info, published 27 Oct 2026) - [CVE-2026-111459: Moxa Remote Connect Suite improper certificate validation](https://junglewise.ai/threats/cve-2026-111459-an-improper-certificate-validation-vulnerability-exists-in-moxa) (info, published 27 Oct 2026) - [CVE-2026-109813: Moxa industrial computing hard-coded root CA private key](https://junglewise.ai/threats/cve-2026-109813-a-hard-coded-cryptographic-key-vulnerability-exists-in-the-usr) (info, published 16 Oct 2026) - [CVE-2026-109812: Moxa industrial computing missing authorization in secrets API](https://junglewise.ai/threats/cve-2026-109812-a-missing-authorization-vulnerability-exists-in-the-internal-api) (high, published 16 Oct 2026) - [CVE-2026-86326: Moxa protocol gateways cryptographic signature verification bypass](https://junglewise.ai/threats/cve-2026-86326-an-improper-verification-of-cryptographic-signature-vulnerability) (info, published 2 Oct 2026) - [CVE-2026-86325: Moxa protocol gateways stack-based buffer overflow in account management](https://junglewise.ai/threats/cve-2026-86325-a-stack-based-buffer-overflow-vulnerability-exists-in-protocol) (info, published 2 Oct 2026) - [CVE-2026-15579: Moxa Ethernet Switch buffer overflow in Web login](https://junglewise.ai/threats/cve-2026-15579-moxa-ethernet-switch-buffer-overflow-in-web-login) (info, CVSS 8.8, published 18 Sep 2026) - [CVE-2026-10831: Moxa NPort and CN2600 denial of service via improper command port access control](https://junglewise.ai/threats/cve-2026-10831-moxa-nport-and-cn2600-denial-of-service-via-improper-command-port) (info, CVSS 6.9, published 16 Jun 2026) - [CVE-2026-10829: Moxa NPort W2150A/W2250A stack overflow in Server location parameter](https://junglewise.ai/threats/cve-2026-10829-moxa-nport-w2150a-w2250a-stack-overflow-in-server-location) (info, CVSS 8.6, published 16 Jun 2026) - [CVE-2026-10828: Moxa NPort W2150A/W2250A format string vulnerability in alias parameter](https://junglewise.ai/threats/cve-2026-10828-moxa-nport-w2150a-w2250a-format-string-vulnerability-in-alias) (info, CVSS 6.9, published 16 Jun 2026) - [CVE-2026-10825: Moxa NPort 6000-G2 Series denial of service in WebSocket API](https://junglewise.ai/threats/cve-2026-10825-moxa-nport-6000-g2-series-denial-of-service-in-websocket-api) (info, CVSS 7.1, published 16 Jun 2026) - [CVE-2026-9266: Moxa Industrial Computers missing cryptographic step in TPM communication](https://junglewise.ai/threats/cve-2026-9266-moxa-industrial-computers-missing-cryptographic-step-in-tpm) (info, CVSS 7, published 12 Jun 2026) - [CVE-2026-4483: Moxa MxGeneralIo insufficient access control in IOCTL](https://junglewise.ai/threats/cve-2026-4483-moxa-mxgeneralio-insufficient-access-control-in-ioctl) (info, CVSS 7, published 8 Apr 2026) ## Most severe Moxa vulnerabilities - [CVE-2026-109812: Moxa industrial computing missing authorization in secrets API](https://junglewise.ai/threats/cve-2026-109812-a-missing-authorization-vulnerability-exists-in-the-internal-api) (high, published 16 Oct 2026) - [CVE-2026-15579: Moxa Ethernet Switch buffer overflow in Web login](https://junglewise.ai/threats/cve-2026-15579-moxa-ethernet-switch-buffer-overflow-in-web-login) (info, CVSS 8.8, published 18 Sep 2026) - [CVE-2026-10829: Moxa NPort W2150A/W2250A stack overflow in Server location parameter](https://junglewise.ai/threats/cve-2026-10829-moxa-nport-w2150a-w2250a-stack-overflow-in-server-location) (info, CVSS 8.6, published 16 Jun 2026) - [CVE-2026-10825: Moxa NPort 6000-G2 Series denial of service in WebSocket API](https://junglewise.ai/threats/cve-2026-10825-moxa-nport-6000-g2-series-denial-of-service-in-websocket-api) (info, CVSS 7.1, published 16 Jun 2026) - [CVE-2026-4483: Moxa MxGeneralIo insufficient access control in IOCTL](https://junglewise.ai/threats/cve-2026-4483-moxa-mxgeneralio-insufficient-access-control-in-ioctl) (info, CVSS 7, published 8 Apr 2026) - [CVE-2026-9266: Moxa Industrial Computers missing cryptographic step in TPM communication](https://junglewise.ai/threats/cve-2026-9266-moxa-industrial-computers-missing-cryptographic-step-in-tpm) (info, CVSS 7, published 12 Jun 2026) - [CVE-2026-10831: Moxa NPort and CN2600 denial of service via improper command port access control](https://junglewise.ai/threats/cve-2026-10831-moxa-nport-and-cn2600-denial-of-service-via-improper-command-port) (info, CVSS 6.9, published 16 Jun 2026) - [CVE-2026-10828: Moxa NPort W2150A/W2250A format string vulnerability in alias parameter](https://junglewise.ai/threats/cve-2026-10828-moxa-nport-w2150a-w2250a-format-string-vulnerability-in-alias) (info, CVSS 6.9, published 16 Jun 2026) - [CVE-2026-86325: Moxa protocol gateways stack-based buffer overflow in account management](https://junglewise.ai/threats/cve-2026-86325-a-stack-based-buffer-overflow-vulnerability-exists-in-protocol) (info, published 2 Oct 2026) - [CVE-2026-86326: Moxa protocol gateways cryptographic signature verification bypass](https://junglewise.ai/threats/cve-2026-86326-an-improper-verification-of-cryptographic-signature-vulnerability) (info, published 2 Oct 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up 100% on the four before (3). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 2 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 4 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Moxa technologies - [Moxa NPort W2150A Series](https://junglewise.ai/threats/technologies/nport-w2150a-series): 3 vulnerabilities - [Moxa NPort W2150A-W4 Series](https://junglewise.ai/threats/technologies/nport-w2150a-w4-series): 3 vulnerabilities - [Moxa NPort W2250A Series](https://junglewise.ai/threats/technologies/nport-w2250a-series): 3 vulnerabilities - [Moxa NPort W2250A-W4 Series](https://junglewise.ai/threats/technologies/nport-w2250a-w4-series): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Moxa vulnerabilities", https://junglewise.ai/threats/vendors/moxa, 9 November 2026.