High severity · published Oct 27, 2026
CVE-2026-111460
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
New
7.7
CVSS
0.3%
EPSS
No
On KEV
Description
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OG
OnCell G3150A-LTE Series · Moxa
1.0.0 · source: vendor