CVE-2026-86325, CVE-2026-86326: Two Vulnerabilities in Moxa Protocol Gateways

CVE v události 2

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.4.

Jak se o tom psalo 3

1. 3. 10. 2026 · zachyceno 04:00 · NCSC-FI FI nadpis události

   CVE-2026-86325, CVE-2026-86326: Two Vulnerabilities in Moxa Protocol Gateways

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.4, CVEs: CVE-2026-86325, CVE-2026-86326, Summary: CVE-2026-86325 CVSS 4.0: 9.4 - AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as…

2. 2. 10. 2026 20:01 · Cyber Centre Kanada CA

   [Control Systems] Moxa security advisory (AV26-995)

   Serial Number: AV26-995 Date: October 2, 2026 As of October 2, 2026, Moxa is affected by vulnerabilities in the following products: MGate 3000 Series Multiple versions MGate 5000 Series Multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-86325, CVE-2026-86326: Two Vulnerabilities in Protocol Gateways Moxa Security Advisory

3. 2. 10. 2026 · zachyceno 17:00 · CERT-FR – avis FR

   Multiples vulnérabilités dans les produits Moxa (02 octobre 2026)

   De multiples vulnérabilités ont été découvertes dans les produits Moxa. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.