Missing Authorization Vulnerability in Moxa Industrial Computing Products

CVE-2026-109812

What is CVE-2026-109812?

A missing authorization vulnerability has been identified in the internal API /api/v1/secrets/ used by some Moxa industrial computing products. This flaw permits low-privileged authenticated attackers, especially those with adjacent network access, to exploit the API. Successful exploitation may lead to unauthorized access to sensitive information, including the potential exposure of confidential data such as cryptographic key material. It is crucial for users of Moxa's industrial products to take proactive measures to mitigate this risk and ensure their systems are protected against potential data breaches.

References