MajorCritical vulnerability

CVE-2026-109813 (CVSS 8.6)

NVD · officialPublished Oct 16, 2026Risk 37/100EPSS 0.2%

A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

Technical details

CVSS

8.6

AV:AdjacentAC:LowPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source