CVE-2026-111548Medium· 5.3▾ SunlitA stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
nport_w2150a-w4_w2250a-w4_series >= 1.0 <= 1.5Please refer to Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-86325Critical· 9.4A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface
CVE-2026-111461High· 7.5SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
CVE-2026-111460High· 7.7Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
CVE-2026-111459High· 7.6Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
CVE-2026-109813High· 8.6A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products
CVE-2026-109812Medium· 6.9A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products