Description
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
Published: 2026-10-27
Score: 7.6 High
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Please refer Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 07:30:00 +0000

Type Values Removed Values Added
Description An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
Title Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
First Time appeared Moxa
Moxa moxa Remote Connect Suite Mrc Client
Weaknesses CWE-295
CPEs cpe:2.3:a:moxa:moxa_remote_connect_suite_mrc_client_:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:moxa_remote_connect_suite_mrc_client_:4.2.2:*:*:*:*:*:*:*
Vendors & Products Moxa
Moxa moxa Remote Connect Suite Mrc Client
References
Metrics cvssV4_0

{'score': 7.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Moxa Moxa Remote Connect Suite Mrc Client
cve-icon MITRE

Status: PUBLISHED

Assigner: Moxa

Published:

Updated: 2026-10-27T07:08:17.598Z

Reserved: 2026-10-16T05:36:36.354Z

Link: CVE-2026-111459

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T08:16:52.953

Modified: 2026-10-27T08:16:52.953

Link: CVE-2026-111459

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T09:00:15Z

Weaknesses
  • CWE-295

    Improper Certificate Validation