CVE-2026-86326
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates.
Published:Oct 2, 2026
Last Modified:Oct 2, 2026
EPS:Oct 2, 2026
EPSS Score:
CVSS Score:8.6
Affected Products
Vendor
Product
Action
Vendor
Moxa
Product
Mgate Mb3170 Series
Moxa
Mgate Mb3170 Series
Vendor
Moxa
Product
Mgate Mb3270 Series
Moxa
Mgate Mb3270 Series
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
