Vendor

Moxa

No Moxa CVE is in the CISA KEV catalogue.

Tracked since 5 Feb · latest article Fri 2 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 in the full CISA catalogue · all time
High exploit odds · current: 0; EPSS top 5%, not in KEV
Articles · 7 days: 0; none this week

Exploited, by due date

CSV download

No Moxa CVE is in the CISA KEV catalogue.

Products

3 products · 5 CVEs in coverage

MGate MB3170 Series2 CVEs · 0 in KEVlatest 2 Oct NPort W2150A-W4/W2250A-W4 Series2 CVEs · 0 in KEVlatest 18 Jun EDS-508A Series1 CVE · 0 in KEVlatest 5 Feb

Trends

Added to CISA KEV per quarter

Q1 2025Q4 2026

Show as table

Added to CISA KEV per quarter
Period	Count
Q1 2025	0
Q2 2025	0
Q3 2025	0
Q4 2025	0
Q1 2026	0
Q2 2026	0
Q3 2026	0
Q4 2026	0

CVEs in coverage by publication month

Publication dates are still being collected (1 of 5).

FIRST EPSS percentiles across CVEs in coverage

05095 · 100th percentile

Show as table

FIRST EPSS percentiles across CVEs in coverage
CVE	EPSS percentile
CVE-2024-12297	57.7
CVE-2026-10829	40.6
CVE-2026-86325	26.2
CVE-2026-10828	23.7
CVE-2026-86326	8.0

Fix listed for 5 of 5 CVEs in coverage.

Coverage

3 articles · all timeFull timeline

Three articles so far, 5 Feb to 2 Oct.

1 2 3

Thu 5 Feb · first reportIndustrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa SwitchesSecurityOnline
Thu 18 JunMoxa NPort servers hit by critical root access bug CVE-2026-10829SecurityOnline
Fri 2 OctMoxa Protocol Gateways Exposed to Buffer Overflow and Backdoor RiskSecurityOnline

All CVEs in coverage

CVE-2024-12297Frontend Authorization Logic Disclosure VulnerabilityCVSSUnrated–Not in KEV0.8%EPSS1article

CVE-2026-10829Moxa NPort W2150A-W4/W2250A-W4 Series vulnerabilityCVSS8.6High–Not in KEV0.5%EPSS1article

CVE-2026-86325Moxa MGate MB3170 Series vulnerabilityCVSS9.4Critical–Not in KEV0.3%EPSS1article

CVE-2026-10828Moxa NPort W2150A-W4/W2250A-W4 Series vulnerabilityCVSS6.9Medium–Not in KEV0.3%EPSS1article

CVE-2026-86326Moxa MGate MB3170 Series vulnerabilityCVSS8.6High–Not in KEV0.2%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Moxa

Exploited, by due date

Products

Trends

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts