CVE-2026-111548

Medium

Description

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

SeverityMedium

CVSS5.3

Exploit probability—

ProductNPort W2150A-W4/W2250A-W4 Series

PublishedOct 27, 2026

First seenOct 27, 2026

Weakness typeCWE-121CWE-121

How to fix

Vendor advisories

moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers

Affected products

Product	Affected versions	Fixed in
Moxa NPort W2150A-W4/W2250A-W4 Series	1.0 ≤ v ≤ 1.5	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.