---
id: "CVE-2026-111548"
kind: "vulnerability"
aliases: ["CVE-2026-111548"]
title: "Moxa wireless device servers: web interface overflow lets attackers crash management service"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["industrial-network", "infrastructure", "moxa", "wireless-device-server"]
not_affected_if: ["no-moxa-device"]
published_at: "2026-10-27T11:17:27+00:00"
first_seen_at: "2026-10-27T11:31:27+00:00"
updated_at: "2026-10-27T11:32:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111548", "first_seen_at": "2026-10-27T11:31:27+00:00"}]
---

# Moxa wireless device servers: web interface overflow lets attackers crash management service

A stack-based buffer overflow in the web management interface of affected Moxa wireless device servers lets an authenticated remote attacker with low privileges make the web management service unresponsive. Recovery requires power cycling the device, while other device functions keep running.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T11:31:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111548

## From the sources

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_