Home / Items
VulnerabilitySeverity 7.6 high
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
CVE-2026-111459 · CVE Program · October 27, 2026
Summary
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
From CVE record (written by the reporting organization), quoted as published. Check the source before acting.
Affected products
| Vendor | Product |
|---|---|
| Moxa | Moxa Remote Connect Suite (MRC Client) |
Why it's on these mode pages
- Maritime: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com