Vulnerability · Published Oct 16, 2026 · Assigned by Moxa
CVE-2026-109813Shared Hard-coded Root CA Private Key
High 8.6
In plain English
A high-severity security flaw in AIG-302 Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 4.0)8.6High
Exploit odds (30 days)0.2%top 94.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | AIG-302 Series | 1.0.0 – through 1.4.0 |
Weakness: CWE-321 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N