OS Command Injection Vulnerability in Moxa OnCell G3150A-LTE Series
CVE-2026-111461

7.5HIGH

Key Information:

Vendor

Moxa
Status
Oncell G3150a-lte Series
Vendor
CVE Published:
27 October 2026

What is CVE-2026-111461?

An OS command injection vulnerability occurs in the Moxa OnCell G3150A-LTE Series when SMS management is enabled and improperly configured. This flaw allows a remote attacker, possessing the necessary privileges, to exploit inadequate input validation within the SMS management feature, potentially leading to the execution of arbitrary commands on the affected device.

Affected Version(s)

OnCell G3150A-LTE Series 1.0.0

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abhinav Agarwal
.