CVE-2026-109813: Shared Hard-coded Root CA Private Key

Published Oct 16, 2026

Updated

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.

Affected Software

1 affected component

MOXA sysman

Event History

Oct 16, 2026

CVE Published

via MITRE·02:57 AM

Data Sourced

via MITRE·02:57 AM

RemedyDescriptionWeakness

Frequently Asked Questions

What level of network access does an attacker need?

An attacker must have adjacent network access and does not need to authenticate. This limits exposure to systems reachable from the same or otherwise adjacent network environment.

What security impact could exploitation have?

Exposure of the hard-coded root CA private key could allow an attacker to compromise the confidentiality and integrity of communications.

Where is the exposed key material located?

The hard-coded cryptographic key is in the /usr/bin/sysman component on affected Moxa industrial computing products.

CVE-2026-109813: Shared Hard-coded Root CA Private Key

Affected Software

Event History

Frequently Asked Questions

What level of network access does an attacker need?

What security impact could exploitation have?

Where is the exposed key material located?

Company

Resources

Contact

Frequently Asked Questions

What level of network access does an attacker need?

What security impact could exploitation have?

Where is the exposed key material located?