A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa'sย industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.
Exploit
CVE-2026-109812
NVD
Refer to CVE-2026-109812 NVD advisory