[Control Systems] Moxa security advisory (AV26-1055)
Canada's Cyber Centre warns Moxa AIG-302 versions through 1.4.1 have two newly listed vulnerabilities.
The Canadian Centre for Cyber Security published advisory AV26-1055 on October 16, 2026, covering vulnerabilities in Moxa AIG-302 Series industrial products at version 1.4.1 and earlier. The notice identifies CVE-2026-109812 and CVE-2026-109813 and points administrators to Moxa's security advisory. It urges organizations to review the linked guidance and apply available updates. The bulletin does not report active exploitation or provide severity scores.
- Canadian Cyber Centre issued control-systems advisory AV26-1055 on October 16, 2026.
- Moxa AIG-302 Series versions 1.4.1 and earlier are affected.
- CVE-2026-109812 and CVE-2026-109813 are listed; no exploitation is stated.
- Vendors
- Moxa
- Products
- AIG-302 Series
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109813+1 related CVE | Hard-coded key in Moxa sysman (adjacent network) | 8.6 group max | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1055 Date: October 16, 2026 As of October 16, 2026, Moxa is affected by vulnerabilities in the following product: AIG-302 Series Prior to or equal to v1. 4. 1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.