CVE-2026-1632CWE-306

RISS SRL MOMA Seismic Station Missing Authentication for Critical Function

Critical · published February 3, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

🚨 An open management interface means a wide-open door for attackers! The MOMA Seismic Station version v2.4.2520 and prior doesn't require any authentication, making it shockingly easy for an intruder to mess with your settings. 🔥 Think of it like a library that doesn't check if you have a library card. Anyone could walk in, rearrange the books, or even check out the rarest manuscripts without anyone batting an eye! This vulnerability could lead to absolute chaos; an attacker could change critical configurations, access sensitive device data, or even reset the device remotely. Imagine someone pulling the plug on your seismic monitoring just when you need it the most!

Put simply

Think of it like a library that doesn't check if you have a library card. Anyone could walk in, rearrange the books, or even check out the rarest manuscripts without anyone batting an eye! The flaw allows unauthenticated users to access the web management interface of the MOMA Seismic Station, enabling them to modify settings and retrieve data without any safeguards in place.

What to do

This vulnerability could lead to absolute chaos; an attacker could change critical configurations, access sensitive device data, or even reset the device remotely. Imagine someone pulling the plug on your seismic monitoring just when you need it the most! Immediately upgrade to version 2.4.2521 or later to close this security gap. Additionally, consider enforcing stricter access controls on the management interface to prevent unauthorized access in the future. You can do this! Stay proactive, and with these steps, you'll keep your seismic systems safe and sound! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00523 · 43.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-03T22:59Z
EPSS history
Timeline
  • 03 FEB 22:59Z
    RISS SRL MOMA Seismic Station Missing Authentication for Critical Function
    cvelistv5