cyfenced.com →

[ CVE-2026-111461 · Published 27 Oct 2026 ]

Vulnerability in Moxa OnCell G3150A-LTE Series

CVSS 7.5 EPSS 1%1 agency advisoryFix available

[ Description ]Official description

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.

[ Fixes ]Fixes and patches

  • Security bulletin: Moxa MPSA-261250Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-, cited by CERT-FR CERTFR-2026-AVI-1393
  • Security bulletin: Moxa MPSA-269510Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-, cited by CERT-FR CERTFR-2026-AVI-1393

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1393

    Multiple vulnerabilities in Moxa products Translated from French

    Multiple vulnerabilities have been discovered in Moxa products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.

    CVE-2026-111460CVE-2026-111459CVE-2026-111461+1 more CVEs

[ References ]References