CVE-2026-109812
2026-10-16
03h18 +00:00
03h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Missing Authorization The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
