CVE-2026-109812 — Missing Authorization on Secret Endpoints
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with…
Published: 2026-10-16 · CVSS: 6.9 · CVSS 4.0
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7