Moxa AIG-302 ThingsPro Edge

First reported by CISA Cybersecurity Advisories, concerning Moxa AIG-302 ThingsPro Edge, CVE-2026-109812, CVE-2026.

1 day ago By HelpMeTrack News Desk Tech & AI

Editorial graphic — no licensed photograph was available for this story.

HelpMeTrack began tracking this technology story after CISA Cybersecurity Advisories reported it on 20 Oct 2026, concerning Moxa AIG-302 ThingsPro Edge, CVE-2026-109812, CVE-2026.

Tracked as CVE-2026-109812, CVE-2026-109813, the flaw is rated MEDIUM with a CVSS score of 6.9 out of 10, classified as CWE-862 Missing Authorization. Moxa has provided a fix for the vulnerability in v1.4.1. Users are encouraged to obtain and apply the update through one of the following methods:

Key facts

CVE: CVE-2026-109812, CVE-2026-109813
Severity: MEDIUM (CVSS 6.9/10)
Vulnerability type: CWE-862 Missing Authorization
Official mitigation: Moxa has provided a fix for the vulnerability in v1.4.1. Users are encouraged to obtain and apply the update through one of the following methods:

Why we're tracking this

We found 2 related reports from CISA Cybersecurity Advisories covering this development. We've tracked 1 further update as more reporting came in. We'll keep this page updated as the story develops, with links to the original reporting below.

Development timeline

20 Oct, 03:58 UTC First reported by CISA Cybersecurity Advisories
21 Oct, 07:00 UTC Confirmed again by CISA Cybersecurity Advisories