Moxa released advisory MPSA-269510 on 27 October. In the Remote Connect Suite (MRC) client, a certificate validation flaw could let an attacker positioned on the network path pretend to be the trusted server and intercept or alter traffic. The end-of-life OnCell G3150A-LTE gateway has two flaws: a built-in shared cryptographic key, which could let an attacker impersonate the device, and a command injection flaw in its SMS management feature. CERT-FR's advisory on the same date also covers an update for the NPort W2150A-W4/W2250A-W4 wireless device servers (MPSA-261250). Affected products and IDs MRC Client v4.2.0 and earlier: CVE-2026-111459 (CVSS v4 7.6); patch v4.2.2 is available from Moxa Technical Support. OnCell G3150A-LTE, all firmware: CVE-2026-111460 (v4 7.7) and CVE-2026-111461 (v4 7.5); end of life, so no fix will come. NPort W2150A-W4/W2250A-W4 before v1.5.9: CVE-2026-111548; contact Moxa support for the fix (this detail comes from CERT-FR alone). Exploitation status Neither Moxa nor CERT-FR reports any exploitation. Why it matters to OT operators Remote access tools and cellular gateways are common routes into remote industrial sites. Moxa advises applying the MRC v4.2.2 patch, resetting OnCell gateways so they generate a new certificate and keys, keeping SMS management turned off unless needed (it is off by default), and planning to replace the end-of-life hardware. Sources Moxa MPSA-269510, 27 Oct 2026 CERT-FR CERTFR-2026-AVI-1393, 27 Oct 2026 Source dates: 27 Oct 2026; 27 Oct 2026.
Moxa released advisory MPSA-269510 on 27 October. In the Remote Connect Suite (MRC) client, a certificate validation flaw could let an attacker positioned on the network path pretend to be the trusted server and intercept or alter traffic. The end-of-life OnCell G3150A-LTE gateway has two flaws: a built-in shared cryptographic key, which could let an attacker impersonate the device, and a command injection flaw in its SMS management feature. CERT-FR's advisory on the same date also covers an update for the NPort W2150A-W4/W2250A-W4 wireless device servers (MPSA-261250). Affected products and IDs MRC Client v4.2.0 and earlier: CVE-2026-111459 (CVSS v4 7.6); patch v4.2.2 is available from Moxa Technical Support. OnCell G3150A-LTE, all firmware: CVE-2026-111460 (v4 7.7) and CVE-2026-111461 (v4 7.5); end of life, so no fix will come. NPort W2150A-W4/W2250A-W4 before v1.5.9: CVE-2026-111548; contact Moxa support for the fix (this detail comes from CERT-FR alone). Exploitation status Neither Moxa nor CERT-FR reports any exploitation. Why it matters to OT operators Remote access tools and cellular gateways are common routes into remote industrial sites. Moxa advises applying the MRC v4.2.2 patch, resetting OnCell gateways so they generate a new certificate and keys, keeping SMS management turned off unless needed (it is off by default), and planning to replace the end-of-life hardware. Sources Moxa MPSA-269510, 27 Oct 2026 CERT-FR CERTFR-2026-AVI-1393, 27 Oct 2026 Source dates: 27 Oct 2026; 27 Oct 2026.