{"id":"CVE-2026-111460","revision":"1e8d4619f3c0438691cfd07c86bacb61","records":[{"revision":"1e8d4619f3c0438691cfd07c86bacb61","observedAt":"2026-10-27T09:00:34.147+00:00","statement":{"source":"cve-program","id":"CVE-2026-111460","aliases":[],"title":"Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series","description":"A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices\u00A0that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.","state":0,"publishedAt":"2026-10-27T07:13:51.55+00:00","modifiedAt":"2026-10-27T07:13:51.55+00:00","affected":[{"ecosystem":"Vendor product","name":"OnCell G3150A-LTE Series","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Moxa\",\n                    \"product\": \"OnCell G3150A-LTE Series\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.0.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"affected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.7,"severity":"HIGH"}],"references":["https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111460","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-111460","identifiers":["CVE-2026-111460"]},"retained":false,"historicalAffected":[]}],"coverage":[]}