Moxa
CVE Numbering Authority
Latest CVE published
Overview
Moxa is a CVE Numbering Authority that has published 66 CVE records since 2023. It is currently classified as active, with 36 CVEs published in the last two years. Its CVE data quality is graded A (100% overall completeness).
Among the 370 CNAs tracked here, Moxa ranks #146 by CVE volume and reports more complete records than 60% of all CNAs.
Data quality report card
How complete and consistent Moxa's CVE records are, scored across vendor, product, CVSS, and CWE coverage.
A CVE record only requires a description to be published. “Completeness” measures how often Moxa also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.
Report card grade
100%
Overall score
What these scores mean
- Vendor completeness
- The share of this CNA's CVEs that name an affected vendor.
- Product completeness
- The share that name a specific affected product.
- CVSS completeness
- The share that include a CVSS severity score.
- CWE completeness
- The share mapped to a CWE weakness type.
- Update rate
- How often this CNA revises CVE records after first publishing them.
- Vendor diversity
- How many distinct vendors this CNA publishes CVEs for.
Severity and exploitation
How the CVSS severity of Moxa's published CVEs breaks down, and how many are known to be exploited in the wild.
1 additional CVE has no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Moxa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Common weakness types
The CWE weakness categories Moxa most often assigns to its CVEs. Follow any weakness to its full explanation.
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9 CVEs
- CWE-250Execution with Unnecessary Privileges4 CVEs
- CWE-798Use of Hard-coded Credentials4 CVEs
- CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
- CWE-1004Sensitive Cookie Without 'HttpOnly' Flag2 CVEs
- CWE-1287Improper Validation of Specified Type of Input2 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
Publishing activity by year
How many CVEs Moxa has published each year.
Top vendors
The vendors Moxa publishes the most CVEs for.
- Moxa74 CVEs
Top products
The products Moxa publishes the most CVEs for.
- EDR-G9010 Series17 CVEs
- TN-4900 Series16 CVEs
- NAT-102 Series15 CVEs
- EDR-8010 Series13 CVEs
- OnCell G4302-LTE4 Series11 CVEs
- EDF-G1002-BP Series11 CVEs
- MXsecurity Series10 CVEs
- mxsecurity9 CVEs
Latest CVEs
The most recent CVEs assigned by Moxa.
- CVE-2026-10831CWE-862
Improper Authorization of Break Signal Commands in Devices
Medium · CVSS 6.9EPSS 0.3%2026-06-16 - CVE-2026-10829CWE-121High · CVSS 8.6EPSS 0.5%2026-06-16
- CVE-2026-10828CWE-134Medium · CVSS 6.9EPSS 0.3%2026-06-16
- CVE-2026-10825CWE-1287
Improper JSON Input Validation in WebSocket API Leads to Denial of Service
High · CVSS 7.1EPSS 0.2%2026-06-16 - CVE-2026-9266CWE-325High · CVSS 7.0EPSS 0.1%2026-06-12
- CVE-2026-3868CWE-130High · CVSS 8.7EPSS 0.4%2026-04-27
- CVE-2026-3867CWE-282Medium · CVSS 6.0EPSS 0.2%2026-04-27
- CVE-2026-4483CWE-782High · CVSS 7.0EPSS 0.3%2026-04-08
- CVE-2026-0715CWE-522High · CVSS 7.0EPSS 0.2%2026-02-05
- CVE-2026-0714CWE-319High · CVSS 7.0EPSS 0.1%2026-02-05
- CVE-2025-15017CWE-489High · CVSS 7.0EPSS 0.2%2025-12-31
- CVE-2025-2026CWE-170High · CVSS 7.1EPSS 0.4%2025-12-31
Track new Moxa CVEs as they are published and get AI-written analysis and remediation guidance.
Monitor Moxa CVEsOther CNAs
Compare data quality across other CVE Numbering Authorities.
Frequently asked questions
Common questions about the Moxa CNA.
- What is the Moxa CNA?
- Moxa is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 66 CVE records since 2023.
- How many CVEs has Moxa published?
- Moxa has published 66 CVE records, including 36 in the last two years.
- What is Moxa's CVE data quality grade?
- RadicalNotion.AI grades Moxa's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
- What products does Moxa publish CVEs for?
- Moxa most frequently publishes CVEs for EDR-G9010 Series, TN-4900 Series, NAT-102 Series, EDR-8010 Series, OnCell G4302-LTE4 Series.
- Which vendors does Moxa cover?
- Moxa publishes CVEs across 2 distinct vendors, most often Moxa.
- Is Moxa actively publishing CVEs?
- Moxa is currently active, based on 36 CVEs in the last two years.
- What is the average severity of Moxa's CVEs?
- The average CVSS base score across Moxa's scored CVEs is 7.0.
- How many critical CVEs has Moxa published?
- Moxa has published 15 critical-severity CVEs and 36 high-severity CVEs.
- Are any of Moxa's CVEs in CISA's Known Exploited Vulnerabilities catalog?
- No. None of Moxa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
- What are the most common weakness types in Moxa's CVEs?
- Moxa's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-250 (Execution with Unnecessary Privileges), CWE-798 (Use of Hard-coded Credentials), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
- How does Moxa rank among CNAs?
- By total CVE volume, Moxa ranks #146 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.
References
- Official CVE.org list of CNA partners (opens in a new tab)
- Learn: What is a CNA?
- CWE directory: the weakness types this CNA maps its CVEs to
CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.
Track Moxa CVEs
Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.