Bootloader Vulnerability in Moxa Arm-based Industrial Computers

CVE-2026-0715

What is CVE-2026-0715?

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure are susceptible to a bootloader access vulnerability, which can be exploited by an attacker with physical access to the device. This vulnerability allows access to the bootloader menu via a serial interface using a device-unique bootloader password. Although access to the bootloader menu does not permit full system takeover or privilege escalation due to enforced digital signature verification, it poses a risk of temporary denial-of-service if a valid image is reflashed. Notably, remote exploitation is not possible, mitigating risks associated with unauthorized remote access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References