Moxa Mgate MB3270 Series vulnerabilities

2 CVEs affecting Moxa Mgate MB3270 Series, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86326, published 2026-10-02.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-86325, published 2026-10-02. Critical severity, CVSS 9.4. EPSS: 0.3% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter…
• CVE-2026-86326, published 2026-10-02. High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days. An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before…