CVE-2026-109813 — Shared Hard-coded Root CA Private Key

CVE-2026-109813

Shared Hard-coded Root CA Private Key PUBLISHED

Description (CNA)

A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

Affected (CNA)

Vendor / product	Versions
Moxa / AIG-302 Series	affected 1.0.0 through 1.4.0; unaffected 1.4.1

CWE

CWE-321

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.