Moxa Industrial Switches DoS & RCE Vulnerabilities (CVE-2026-1098112/113)

Vulnerability Overview Vulnerability Title: CVE-2026-1098112, CVE-2026-1098113 - Vulnerabilities in Industrial Control Products Release Date: January 28, 2026 Last Updated: January 28, 2026 Related Vulnerabilities: CVE-2026-1098112 CVE-2026-1098113 Description: Multiple vulnerabilities exist in Moxa industrial control products that may lead to Denial of Service (DoS) and Remote Code Execution (RCE). These vulnerabilities allow unauthorized attackers to exploit the system by sending crafted requests, resulting in service disruption or the execution of malicious code. Scope of Impact Affected Products: Moxa EDS Series Switches - EDS-405E - EDS-408E - EDS-416E - EDS-424E - EDS-440E - EDS-450E - EDS-460E - EDS-470E - EDS-480E - EDS-490E - EDS-4100E - EDS-4200E - EDS-4300E - EDS-4400E - EDS-4500E - EDS-4600E - EDS-4700E - EDS-4800E - EDS-4900E - EDS-41000E - EDS-42000E - EDS-43000E - EDS-44000E - EDS-45000E - EDS-46000E - EDS-47000E - EDS-48000E - EDS-49000E Vulnerability Details: CVE-2026-1098112: Denial of Service (DoS) - CVSS Score: 7.5 - CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Impact: Remote attackers can cause system crashes or reboots by sending crafted requests. CVE-2026-1098113: Remote Code Execution (RCE) - CVSS Score: 9.8 - CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Impact: Remote attackers can execute arbitrary code on the system by sending crafted requests. Remediation Mitigation Measures: Temporary Mitigations: - Restrict network access to the devices, allowing only trusted IP addresses. - Enable firewall rules to block unnecessary inbound traffic. - Regularly monitor device logs to detect anomalous activity. Remediation Recommendations: Firmware Update: - Visit the official Moxa website to download and install the latest firmware version. - Ensure all affected devices are updated to the latest firmware version. General Security Recommendations: Regularly update devices and software to obtain the latest security patches. Implement network segmentation to limit the scope of access for potential attackers. Use strong passwords and multi-factor authentication to enhance system security. Conduct regular security audits and penetration testing to identify and remediate potential vulnerabilities. POC Code or Exploit Code No specific POC code or exploit code is included in this page. It is recommended to refer to the detailed technical documentation provided by Moxa or contact Moxa technical support for more information.

Goal Reached Thanks to every supporter — we hit 100%!

Moxa Industrial Switches DoS & RCE Vulnerabilities (CVE-2026-1098112/113)