CVE-2026-111548

State: Published
Severity: 5.3 Medium
Published: Oct 27, 2026
Updated: Oct 27, 2026
Reserved: Oct 16, 2026

Description

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	Moxa

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
NPort W2150A-W4/W2250A-W4 SeriesMoxa	1.0 through 1.5Affected

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-serversvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.