CVE-2026-109813CWE-321

CVE-2026-109813

published October 16, 2026

CVSS
8.6
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
8.6 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-10-16T07:18Z
References (1)
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products · [email protected]
EPSS history
Timeline
  • 17 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 16 OCT 02:57Z
    Shared Hard-coded Root CA Private Key
    cvelistv5
  • 16 OCT 02:57Z
    Shared Hard-coded Root CA Private Key
    cvelistv5