Moxa MRC Client and OnCell LTE devices hit by three flaws
Original title: [Control Systems] Moxa security advisory (AV26-1089)
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
On October 27, 2026, the Canadian Centre for Cyber Security issued AV26-1089 on vulnerabilities in Moxa industrial products. Moxa Remote Connect Suite (MRC Client) prior to or equal to v4.2.0 and all firmware versions of the OnCell G3150A-LTE Series are affected. The flaws are CVE-2026-111459, CVE-2026-111460 and CVE-2026-111461. The centre tells users to review Moxa's links and apply updates as they become available.
Unconfirmed: The alert does not state impact, severity, exploitation status or fixed versions.
- The alert is serial AV26-1089 and dated October 27, 2026.
- MRC Client versions prior to or equal to v4.2.0 are listed.
- Every OnCell G3150A-LTE Series firmware version is listed as affected.
- No fixed builds or vulnerability impacts are stated in the alert.
Impact: Impact of the three Moxa flaws is not stated
| Product | Affected |
|---|---|
| Moxa Remote Connect Suite (MRC Client) | Prior to or equal to v4.2.0 |
| Moxa OnCell G3150A-LTE Series | All firmware versions |
- 1.Review Moxa's linked advisory and apply updates as they become available.
- Vendors
- Moxa
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111459 | Improper certificate validation in Moxa MRC Client | 7.6 | — | ||
CVE-2026-111460+1 related CVE | Hard-coded cryptographic key in Moxa OnCell G3150A-LTE | 7.7 group max | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1089 Date: October 27, 2026 As of October 27, 2026, Moxa is affected by vulnerabilities in the following products: Moxa Remote Connect Suite (MRC Client) Prior to or equal to v4. 2. 0 OnCell G3150A-LTE Series All firmware versions The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.