Intelligence online17 sources monitored15 actively exploited 7d41 published 24hChecked recently
Vulnerability record

CVE-2026-109813

HighNo known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Description

A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-109813 scored CVSS 8.6

    Basis: NIST National Vulnerability Database

  2. Disclosed

    Moxa AIG-302 ThingsPro Edge

    Basis: CISA Cybersecurity Advisories (government advisory)

Coverage

References

  • moxa.com https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813…