Moxa Vulnerabilities Expose Wireless and Remote Access Products to Code Execution Risks
Vulnerability Disclosure · 3 sources · Updated 1d ago · First seen Oct 27, 2026
CERT-FR and the Canadian Centre for Cyber Security issued advisories covering multiple vulnerabilities in Moxa wireless and remote access products. CERT-FR reported potential arbitrary code execution, remote denial of service, security-policy bypass, and loss of data confidentiality or integrity across the vulnerabilities. It identified NPort W2150A-W4/W2250A-W4 versions before 1.5.9 and Remote Connect Suite versions before 4.2.2 as affected. Canada's advisory lists MRC Client versions 4.2.0 and earlier and all OnCell G3150A-LTE firmware versions, referencing CVE-2026-111459, CVE-2026-111460, and CVE-2026-111461 without mapping individual flaws to products or impacts.
Administrators should inventory affected deployments and contact Moxa technical support for the NPort and Remote Connect Suite fixes, as directed by CERT-FR. Moxa identifies the OnCell G3150A-LTE Series as end-of-life; organizations should prioritize replacement planning and review exposure and access controls for devices remaining in service. The Canadian advisory recommends reviewing the vendor bulletins and applying necessary updates as they become available; it does not specify severity or exploitation status.
