{"id":"CVE-2026-111459","kind":"vulnerability","aliases":["CVE-2026-111459"],"related":[],"title":"Moxa MRC Client: improper certificate validation enables server impersonation","description":"An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.","summary":"The Moxa Remote Connect Suite MRC Client does not properly validate server certificates under certain conditions. An on-path attacker can impersonate the trusted server and read or alter traffic between client and server.","severity":"high","cvss":7.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["industrial-ot","infrastructure","moxa","mrc-client","remote-access"],"not_affected_if":["unknown"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-27T08:16:52+00:00","first_seen_at":"2026-10-27T08:31:46+00:00","triaged_at":"2026-10-27T08:32:28+00:00","updated_at":"2026-10-27T08:32:28+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-27T08:32:28Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Moxa MRC Client: improper certificate validation enables server impersonation","impact":"high","summary":"The Moxa Remote Connect Suite MRC Client does not properly validate server certificates under certain conditions. An on-path attacker can impersonate the trusted server and read or alter traffic between client and server.","category":"infrastructure","nicknames":[],"who_cares":["moxa","mrc-client","industrial-ot","remote-access"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker intercepts and alters MRC client-server traffic via impersonation","analyst_note":"Find the Moxa advisory and affected/fixed MRC Client versions and the specific conditions for the flaw; the NVD entry alone gives no versions or fix.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running the Moxa Remote Connect Suite MRC Client to reach industrial or remote equipment. The sources do not say which versions or configurations are affected. Exposure requires an attacker positioned on the network path between the client and its server.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000553,"input_tokens":3334,"output_tokens":439,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111459':12A,15A '-2026':11A,14A 'access':26B,85C 'alter':56B 'attack':47B,80C,109C 'certain':41B,76C 'certif':5A,39B,64C 'client':3A,23B,33B,59B,74C,92C 'communic':88C,117C 'compromis':111C 'condit':42B,77C 'conduct':102C 'confidenti':113C 'connect':30B,71C 'could':96C 'cve':10A,13A 'enabl':7A 'exist':67C 'imperson':9A,49B,97C 'improp':4A,63C 'industri':17B 'industrial-ot':16B 'infrastructur':19B 'integr':115C 'man':105C 'man-in-the-middl':104C 'middl':108C 'moxa':1A,20B,28B,69C 'mrc':2A,22B,32B,73C,91C 'mrc-client':21B 'on-path':44B,82C 'ot':18B 'path':46B,84C 'potenti':110C 'proper':36B 'read':54B 'remot':25B,29B,70C 'remote-access':24B 'server':8A,38B,52B,61B,95C,100C 'suit':31B,72C 'traffic':57B 'trust':51B,99C 'unauthent':79C 'valid':6A,37B,65C 'vulner':66C","nicknames":[],"mitigations":[],"who_affected":"Teams running the Moxa Remote Connect Suite MRC Client to reach industrial or remote equipment. The sources do not say which versions or configurations are affected. Exposure requires an attacker positioned on the network path between the client and its server.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T08:16:52+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@moxa.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111459","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111459","severity":null,"published_at":"2026-10-27T08:16:52+00:00","modified_at":"2026-10-27T08:16:52+00:00","first_seen_at":"2026-10-27T08:31:46+00:00","fetched_at":"2026-10-27T08:31:46+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}