CVE-2026-86325
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as a read-only user to the web management interface could supply a specially crafted account name that exceeds the size of the internal stack buffer, resulting in corruption of program execution flow. Successful exploitation could allow an attacker to read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability.
CVE-2026-86325
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-86325
MGate MB3170 Series
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
MGate MB3270 Series
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Moxa",
"product": "MGate MB3170 Series",
"versions": [
{
"status": "affected",
"version": "1.0",
"versionType": "custom",
"lessThanOrEqual": "4.7"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Moxa",
"product": "MGate MB3270 Series",
"versions": [
{
"status": "affected",
"version": "1.0",
"versionType": "custom",
"lessThanOrEqual": "4.7"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-86325
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #7864 · Revision 1
- Added to Heist Feed
- Publisher date