# Moxa AIG-302 Series patches two vulnerabilities

Published: 2026-10-16 · Severity: routine · Sectors: manufacturing, infrastructure
Canonical: https://vorant.io/reports/51e558ce-412f-5994-9d77-3066086bc586/moxa-aig-302-series-patches-two-vulnerabilities

> CERT-FR advisory details two vulnerabilities in Moxa AIG-302 Series devices prior to v1.4.1 allowing confidentiality, integrity, and security-bypass impacts.

CERT-FR has published an advisory relaying Moxa's security bulletin MPSA-262560, covering two vulnerabilities (CVE-2026-109812 and CVE-2026-109813) affecting the Moxa AIG-302 Series industrial computing product line, specifically versions prior to 1.4.1. The vulnerabilities can allow an attacker to compromise data confidentiality, compromise data integrity, and bypass security policy controls on affected devices.

No technical details on exploitation complexity, attack vectors, or proof-of-concept availability are provided in this advisory; it functions as a notification pointing to the vendor's own bulletin for remediation guidance. There is no indication of active exploitation in the wild. Defenders operating Moxa AIG-302 Series devices, which are typically deployed in industrial and operational technology environments, should consult the referenced Moxa bulletin and apply the vendor-supplied patches to reach version 1.4.1 or later.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109812, CVE-2026-109813

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1327

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/51e558ce-412f-5994-9d77-3066086bc586/moxa-aig-302-series-patches-two-vulnerabilities.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup