MEDIUM 6.9 NVD

CVE-2026-109812

A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authentica

A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109

Published: 2026-10-16 · Source: NVD · Feed updated: 2026-10-16

This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-16 via NVD.

vulnfeed aggregates 14608 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.