Skip to content
OpenAdvisories
High · 7.6 CVE-2026-111459 EUVD-2026-110617GHSA-vrmg-3792-4rx3

Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Moxa

Description

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.

Affected products

VendorProductAffectedFixed
Moxa Moxa Remote Connect Suite (MRC Client) 1.0.0 – ≤ 4.2.0 4.2.2

References