CVE-2026-111460

High

Description

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

SeverityHigh

CVSS7.7

Exploit probability—

ProductOnCell G3150A-LTE Series

PublishedOct 27, 2026

First seenOct 27, 2026

Weakness typeCWE-321CWE-321

How to fix

Vendor advisories

moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

Affected products

Product	Affected versions	Fixed in
Moxa OnCell G3150A-LTE Series	1.0.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.