CVE-2026-86326
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates.
CVE-2026-86326
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-86326
MGate MB3170 Series
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
MGate MB3270 Series
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Moxa",
"product": "MGate MB3170 Series",
"versions": [
{
"status": "affected",
"version": "1.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Moxa",
"product": "MGate MB3270 Series",
"versions": [
{
"status": "affected",
"version": "1.0"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-86326
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #7853 · Revision 1
- Added to Heist Feed
- Publisher date