Medium severity · published Apr 27, 2026
CVE-2026-3867
An improper ownership management vulnerability has been identified in Moxa’s Secure Router
6.0
CVSS
0.2%
EPSS
No
On KEV
Description
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
EDR-8010 Series · Moxa
1.0 through 3.23 · source: vendor
ES
EDR-G9010 Series · Moxa
1.0 through 3.23.1; 3.24 · source: vendor
Affected product
ES
EDR-8010 Series
Moxa
More from EDR-8010 Series
9.9
CVE-2025-6950
An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers
9.8
CVE-2024-9140
Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140
9.3
CVE-2025-6949
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers
9.3
CVE-2025-6893
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers
9.2
CVE-2025-0415
Command Injection in NTP Setting