Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.7, CVEs: CVE-2026-111459, CVE-2026-111460, CVE-2026-111461, Summary: This security advisory addresses one vulnerability identified in Moxa Remote Connect Suite (MRC Client) and two vulnerabilities identified in the OnCell G3150A-LTE Series. CVE-2026-111459 - Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) An improper certificate validation vulnerability…
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.4, CVEs: CVE-2026-86325, CVE-2026-86326, Summary: CVE-2026-86325 CVSS 4.0: 9.4 - AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as…
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.8, CVEs: CVE-2026-15579, Summary: Moxa has disclosed an out-of-bounds write vulnerability in the Web login functionality of TN-4500B Series Ethernet switches. The vulnerability can be exploited remotely without authentication by supplying an overly long username, potentially causing a buffer overflow and denial of service. Moxa has released firmware 2.1, which addresses the vulnerability. Affected…