CVE-2026-1114597.6High
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
Moxa · Moxa Remote Connect Suite (MRC Client)
Not in CISA KEVVendor fix available
0.2%probability of exploitation in the next 30 days
6th percentile
050100
Higher than 6% of scored CVEs
7.6HighCVSS
LowMediumHighCrit.
DescriptionNVD
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- Moxa discloses three flaws in remote access productsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.