CVE-2026-109813High· 8.6▾ TwilightA hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to comp…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
aig-302_series >= 1.0.0 <= 1.4.0Please refer to Moxa Security Advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109812Medium· 6.9Missing Authorization on Secret Endpoints
CVE-2026-86326High· 8.6An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation
CVE-2026-86325Critical· 9.4A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface
CVE-2026-15579High· 8.8An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing
CVE-2026-111347Medium· 5.9go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
CVE-2026-105035High· 7.8EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key