[ CVE-2026-111459 · Published 27 Oct 2026 ]
Vulnerability in Moxa Remote Connect Suite (MRC Client)
CVSS 7.6
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
[ Fixes ]Fixes and patches
- Security bulletin: Moxa MPSA-261250Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-, cited by CERT-FR CERTFR-2026-AVI-1393
- Security bulletin: Moxa MPSA-269510Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-, cited by CERT-FR CERTFR-2026-AVI-1393
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1393
Multiple vulnerabilities in Moxa products Translated from French
Multiple vulnerabilities have been discovered in Moxa products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.