Moxa AIG-302 ThingsPro Edge | CISA

Cybersecurity and Infrastructure Security Agency CISA·cisa.gov·5 days ago

Reading 0:00

15s threshold

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.

The following versions of Moxa AIG-302 ThingsPro Edge are affected:

Moxa AIG-302 ThingsPro Edge firmware <=1.4.0 (CVE-2026-109812, CVE-2026-109813)

CVSS Vendor Equipment

v3 8.1 Moxa Moxa AIG-302 ThingsPro Edge firmware

2 Vulnerabilities

Missing Authorization, Use of Hard-coded Cryptographic Key

Background

Critical Infrastructure Sectors: Critical Manufacturing, Energy, Water and Wastewater Systems

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Taiwan

Vulnerabilities

CVE-2026-109812

A missing authorization vulnerability exists in the internal API /api/v1/secrets/ for some of Moxa's industrial computing products.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Menu