Improper Certificate Validation in Moxa Remote Connect Suite
CVE-2026-111459

7.6HIGH

Key Information:

Vendor

Moxa
Status
Moxa Remote Connect Suite (mrc Client)
Vendor
CVE Published:
27 October 2026

What is CVE-2026-111459?

An improper certificate validation vulnerability exists in the Moxa Remote Connect Suite (MRC Client). This issue may allow an unauthenticated attacker with on-path access to intercept and manipulate communication between the MRC Client and its associated server. By impersonating a trusted server, the attacker can conduct a man-in-the-middle attack, jeopardizing the confidentiality and integrity of the data being transmitted. Organizations utilizing MRC Client should review their configurations and security practices to mitigate potential threats stemming from this vulnerability.

Affected Version(s)

Moxa Remote Connect Suite (MRC Client) 1.0.0 <= 4.2.0

Moxa Remote Connect Suite (MRC Client) 4.2.2

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abhinav Agarwal
.