Medium severity · published Oct 27, 2026
CVE-2026-111548
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers
New
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NW
NPort W2150A-W4/W2250A-W4 Series · Moxa
1.0 through 1.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-111548
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-111548
www.moxa.com
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers
More from NPort W2150A-W4/W2250A-W4 Series
8.6
CVE-2026-10829
A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier
6.9
CVE-2026-10828
A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior
