For awareness Low Patch in your normal cycle
Moxa remote-access client and cellular gateway have three flaws
Canadian Centre for Cyber SecurityMoxaCVE-2026-111459, CVE-2026-111460, CVE-2026-111461
What happened. Moxa has published an advisory on three vulnerabilities (CVE-2026-111459, CVE-2026-111460, CVE-2026-111461) in Moxa Remote Connect Suite client and the OnCell G3150A-LTE Series. No severity rating is given.
Who is affected. Moxa Remote Connect Suite (MRC Client) up to and including v4.2.0, and all firmware versions of the Moxa OnCell G3150A-LTE Series.
What to do. Check whether you run these Moxa products, then read the Moxa advisory and apply the updates it provides.
When to act. For awareness: no known exploitation and a lower score
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L3.5
- L1
Why: Remote-access client software sits on the remote-access path (L3.5), while the OnCell cellular gateway connects field devices and sites (L1) to outside networks.
- Are you exposed?
Search your asset inventory for MRC Client v4.2.0 or earlier and any OnCell G3150A-LTE devices.
- If you cannot fix it yet
- Restrict access to OnCell gateways to known management hosts and block unneeded inbound traffic from the cellular side.
- Enforce multi-factor authentication and limit user access on remote-access paths that use MRC Client.
- Watch for
- Unexpected remote connections made through MRC Client or the OnCell gateways.
- Configuration changes or logons on OnCell gateways from unknown sources.
- ATT&CK for ICS
- T0886Remote Services
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Canadian Centre for Cyber Security (opens cyber.gc.ca)
More on Moxa CVE-2026-111459 CVE-2026-111460 CVE-2026-111461