CVE-2026-3867
Description
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa EDR-8010 Series | 1.0 ≤ v ≤ 3.23 | — |
| Moxa EDR-G9010 Series | 1.0 ≤ v ≤ 3.23.1, 3.24 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.