Loading vulnerability…
Improper Certificate Validation in Moxa Remote Connect Suite MRC Client
CVE-2026-111459 is an improper certificate validation vulnerability in the MRC Client component of Moxa Remote Connect Suite. Under certain conditions, an unauthenticated attacker positioned on the communication path between the client and its server can impersonate a trusted server and conduct a man-in-the-middle attack. This can compromise the confidentiality and integrity of client-server communications. MRC Client versions 4.2.0 and earlier are identified as affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can compromise the confidentiality and integrity of MRC Client communications by allowing an attacker to impersonate the trusted server and potentially intercept or modify exchanged information.
Patch, then assume compromise.
Apply applicable Moxa security updates as they become available. A fixed MRC Client version is not specified in the available information.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.