Vulnerability in Moxa products (July 24, 2026)
A vulnerability has been discovered in Moxa products. It allows an attacker to cause privilege escalation.
CSIRTS triage
- What
- A vulnerability allows an attacker to cause privilege escalation.
- Who is affected
- Deployments of Moxa products are affected.
- Urgency
- Remediation is urgent due to the potential for privilege escalation, though exploitation status is currently unknown.
- Action
- Users should update their Moxa products to the latest version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Moxa products
Get an email when a new Moxa products advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0931/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2026-463331.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 72% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-46333 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownexploitedSiemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFPcisa
- unknown[Control Systems] Moxa security advisory (AV26-742)cccs
- medium[UPDATE] [medium] Linux Kernel: Vulnerability Allows Bypassing Security Measurescert-bund
- highUSN-8569-1: Linux kernel (HWE) vulnerabilitiesubuntu
- unknownMultiple vulnerabilities in F5 products (July 16, 2026)cert-fr-avis
- unknownexploitedUSN-8528-1: Linux kernel (Xilinx ZynqMP) vulnerabilitiesubuntu
- unknownMultiple vulnerabilities in Red Hat Linux kernel (July 3, 2026)cert-fr-avis
- unknownRedHat Linux Kernel Multiple Vulnerabilitieshkcert
- unknownMultiple vulnerabilities in the Ubuntu Linux kernel (June 26, 2026)cert-fr-avis
- criticalexploitedImpact of Linux Kernel vulnerabilities on B&R productscisa
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans le noyau Linux de SUSE (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans les produits IBM (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31