CVE-2026-111460 Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-111460?
CVE-2026-111460 is a high-severity vulnerability in Moxa OnCell G3150A-LTE Series, published on 27 Oct 2026.
Official description
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Weakness: CWE-321
Which versions are affected by CVE-2026-111460?
How do I fix CVE-2026-111460?
No fix has been published for CVE-2026-111460 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-111460 being exploited?
There is no known exploitation of CVE-2026-111460 in the wild and no public exploit code.
Sources
Also known as GHSA-hpv3-4h37-hf99.