Live › vulnerability › CVE-2026-111459
Go to dashboardThe Moxa Remote Connect Suite MRC Client does not properly validate server certificates under certain conditions. An on-path attacker can impersonate the trusted server and read or alter traffic between client and server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 08:31 UTC. All times on this page are UTC.
Teams running the Moxa Remote Connect Suite MRC Client to reach industrial or remote equipment. The sources do not say which versions or configurations are affected. Exposure requires an attacker positioned on the network path between the client and its server.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
This page as .md · .json · in your agent: get_signal("CVE-2026-111459")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.