Hard-Coded Cryptographic Key Vulnerability in Moxa Industrial Computing Products
CVE-2026-109813

8.6HIGH

Key Information:

Vendor

Moxa
Status
Aig-302 Series
Vendor
CVE Published:
16 October 2026

What is CVE-2026-109813?

A hard-coded cryptographic key vulnerability affects certain Moxa industrial computing products. An attacker with adjacent network access could exploit this weakness to gain unauthorized access, compromising the confidentiality and integrity of communications. The vulnerability stems from the presence of an exposed private key within the software component located at /usr/bin/sysman, raising concerns regarding data protection protocols and network security.

Affected Version(s)

AIG-302 Series 1.0.0 <= 1.4.0

AIG-302 Series 1.4.1

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ievgen Bondarenko
.