Medium 5.3Published Oct 27, 2026

CVE-2026-111548A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers.

Updated under an hour ago (Oct 30, 2026, 5:00 AM ET)

Does this affect you?

It affects Moxa NPort W2150A-W4/W2250A-W4 Series. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for Moxa NPort W2150A-W4/W2250A-W4 Series Exploited in the last 30 days

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

CVSS: 5.3 MEDIUM (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weakness (CWE): CWE-121
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Moxa
NVD analysis: Awaiting Analysis
Record last updated: Oct 27, 2026
First seen by InfoSec Signals: Oct 27, 2026

Affected products

Affected products

Moxa NPort W2150A-W4/W2250A-W4 Series moxa:nport_w2150a_w4_w2250a_w4_series (from the name)	from 1.0 through 1.5	CNA record

References

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.