Vendors and CVEs › CVEs › CVE-2026-109813
CVE-2026-109813: what it is, who is affected and what to do
Moxa AIG-302 ThingsPro Edge firmware up to 1.4.0 has two flaws: missing authorisation and a hard-coded cryptographic key. One lets a privileged attacker with adjacent network access read sensitive data, including keys. Moxa has provided a fix.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-109813 on the National Vulnerability Database · CISA’s known exploited catalog
The stories
High
Moxa AIG-302 ThingsPro Edge flaws could expose sensitive data
Moxa AIG-302 ThingsPro Edge firmware up to 1.4.0 has two flaws: missing authorisation and a hard-coded cryptographic key. One lets a privileged attacker with adjacent network access read sensitive data, including keys.
Medium
Moxa AIG-302 Series has two flaws in versions up to v1.4.1
Moxa is affected by vulnerabilities in its AIG-302 Series, versions up to and including v1.4.1. The Canadian Centre for Cyber Security lists CVE-2026-109812 and CVE-2026-109813 and links to Moxa's advisory.