CVE-2026-109813: Moxa Aig-302 Series

High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days.

A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

Affected products

• Moxa Aig-302 Series: from 1.0.0, up to and including 1.4.0

Published 2026-10-16. Last modified 2026-10-16.