CVE-2026-111459

High

Description

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.

SeverityHigh

CVSS7.6

Exploit probability—

ProductMoxa Remote Connect Suite (MRC Client)

PublishedOct 27, 2026

First seenOct 27, 2026

Weakness typeCWE-295CWE-295

How to fix

Vendor advisories

moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

Affected products

Product	Affected versions	Fixed in
Moxa Moxa Remote Connect Suite (MRC Client)	1.0.0 ≤ v ≤ 4.2.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.