{"id":"CVE-2026-111459","aliases":[],"title":"Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)","titleSource":"Moxa","descriptionSource":"Moxa","products":[{"vendor":"Moxa","name":"Moxa Remote Connect Suite (MRC Client)","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThanOrEqual":"4.2.0","versionType":"custom"},{"version":"4.2.2","status":"unaffected","versionType":"custom"}],"defaultStatus":"unaffected","source":"Moxa","url":"https://www.cve.org/CVERecord?id=CVE-2026-111459"}],"remediation":[{"text":"Please refer Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client","source":"Moxa","url":"https://www.cve.org/CVERecord?id=CVE-2026-111459"}],"description":"An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.","severity":"high","score":7.6,"published":"2026-10-27T07:08:17.598Z","modified":"2026-10-27T07:08:17.598Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"],"sources":[{"name":"CVE","id":"CVE-2026-111459","modified":"2026-10-27T07:08:17.598Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-111459"}],"assessments":[{"source":"Moxa","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":7.6}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T18:05:32.161Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}