Improper Ownership Management Vulnerability in Moxa’s Secure Router

CVE-2026-3867

What is CVE-2026-3867?

An improper ownership management vulnerability in Moxa's Secure Router allows low-privileged authenticated users to access configuration files that contain hashed passwords for administrative accounts. Exploitation of this vulnerability requires that the configuration file be exported, thereby exposing sensitive information. While this flaw does not compromise the integrity or availability of the router, it poses a risk to confidentiality as attackers can strategically gather information if the file is improperly handled. Ensuring strict ownership and access control measures is critical to mitigate this risk.

References