PT-2026-35345 · Moxa · Secure Router

Published 2026-04-27 · Updated 2026-04-28 · CVE-2026-3867

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Medium

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Moxa Secure Router (affected versions not specified)

Description Improper ownership management allows a low-privileged authenticated user to access a configuration file containing the hashed password of the administrative account. This can lead to the disclosure of sensitive information. Exploitation is only possible if the configuration file has been exported. This issue does not affect the integrity or availability of the product or subsequent systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-282

Related Identifiers

CVE-2026-3867

Affected Products

Secure Router

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-3867 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons · Vendor Advisory
• https://t.me/cveNotify/161014 · Telegram Post
• https://twitter.com/CVEnew/status/2048910104293224720 · Twitter Post
• https://t.me/cveNotify/161015 · Telegram Post
• https://twitter.com/CCBalert/status/2049133079667544293 · Twitter Post
• https://t.me/CVEtracker/51889 · Telegram Post