[Control Systems] Moxa security advisory (AV26-995)
Canada’s Cyber Centre warned that Moxa MGate 3000 and 5000 gateways are affected by two vulnerabilities.
The Canadian Centre for Cyber Security issued alert AV26-995 on October 2, 2026, for vulnerabilities in Moxa protocol gateways. Multiple versions of the MGate 3000 Series and MGate 5000 Series are affected. The alert identifies CVE-2026-86325 and CVE-2026-86326 and directs users to Moxa’s security advisory. It does not report active exploitation or severity scores and urges administrators to apply updates when available.
- Canadian alert AV26-995 covers Moxa industrial protocol gateways.
- Affected lines are multiple MGate 3000 and 5000 versions.
- The notice cites CVE-2026-86325 and CVE-2026-86326.
- No exploitation or severity scores are included.
- Administrators are told to review Moxa’s advisory and apply updates.
- Vendors
- Moxa
- Organizations
- Canadian Centre for Cyber SecurityMoxa
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-86325+1 related CVE | Stack buffer overflow in Moxa protocol gateway accounts | 9.4 group max | — |
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-995 Date: October 2, 2026 As of October 2, 2026, Moxa is affected by vulnerabilities in the following products: MGate 3000 Series Multiple versions MGate 5000 Series Multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.