aig-302_series vulnerabilities
CVEs whose affected-version data names the aig-302_series package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-109813High· 8.6Shared Hard-coded Root CA Private Key
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to comp…
▾ TwilightMoxa · AIG-302 Seriesvia CVEORG
CVE-2026-109812Medium· 6.9Missing Authorization on Secret Endpoints
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to…
▾ SunlitMoxa · AIG-302 Seriesvia CVEORG