All vulnerabilities
CVE-2026-111459

Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

Moxa Moxa Remote Connect Suite (MRC Client)Industrial & IoT
Open in ThreatlineRecord JSON
CVSS
7.6High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.

Text from CVE List

Affected versions 2

  • Moxa Remote Connect Suite (MRC Client)affected: 1.0.0 through 4.2.0CVE List
  • Moxa Remote Connect Suite (MRC Client)unaffected: 4.2.2CVE List

References 1