{"metadata": {"vulnerability": "CVE-2026-111459", "count": 17, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-10-16T05:36:36.354Z", "date_only": false, "value": "2026-10-16T05:36:36.354Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111459", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "last_revision_date"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-27T06:24:14Z", "date_only": false, "value": "2026-10-27T06:24:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-1089", "record": "CVE-2026-111459", "field": "creation_timestamp", "uuid": "a919b30c-5b21-4eb3-87bb-b2f61e17d68b", "url": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-1089"}, {"timestamp": "2026-10-27T07:08:17.598Z", "date_only": false, "value": "2026-10-27T07:08:17.598Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111459", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T07:08:17.598Z", "date_only": false, "value": "2026-10-27T07:08:17.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111459", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T07:08:17.598Z", "date_only": false, "value": "2026-10-27T07:08:17.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Moxa", "record": "CVE-2026-111459", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T07:31:36.688Z", "date_only": false, "value": "2026-10-27T07:31:36.688991Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117511703508317603", "record": "cve-2026-111459", "field": "creation_timestamp", "uuid": "de3f5fab-578f-4edd-8bfa-fa6b58f3b9ac", "content": "CVE-2026-111459 Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111459https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client#moxa #Moxa #MoxaRemoteConnectSuite(MRCClient)#CVE_2026_111459#bot", "url": "https://infosec.exchange/users/cve/statuses/117511703508317603"}, {"timestamp": "2026-10-27T07:32:17.109Z", "date_only": false, "value": "2026-10-27T07:32:17.109988Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117511706151945480", "record": "cve-2026-111459", "field": "creation_timestamp", "uuid": "862a9360-74e3-46c7-8e60-f52b081ee95b", "content": "CVE-2026-111460 Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111460https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client#Moxa #OnCellG3150A-LTESeries#CVE_2026_111460#bot", "url": "https://infosec.exchange/users/cve/statuses/117511706151945480"}, {"timestamp": "2026-10-27T07:32:57.868Z", "date_only": false, "value": "2026-10-27T07:32:57.868288Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117511708813514070", "record": "cve-2026-111459", "field": "creation_timestamp", "uuid": "40465961-b43c-4d76-8016-104050668a29", "content": "CVE-2026-111461 SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111461https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client#Moxa #OnCellG3150A-LTESeries#CVE_2026_111461#bot", "url": "https://infosec.exchange/users/cve/statuses/117511708813514070"}, {"timestamp": "2026-10-27T08:16:52Z", "date_only": false, "value": "2026-10-27T08:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VRMG-3792-4RX3", "record": "GHSA-VRMG-3792-4RX3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-27T08:16:52.953Z", "date_only": false, "value": "2026-10-27T08:16:52.953", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111459", "record": "FKIE_CVE-2026-111459", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T09:30:58Z", "date_only": false, "value": "2026-10-27T09:30:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VRMG-3792-4RX3", "record": "GHSA-VRMG-3792-4RX3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T09:30:58Z", "date_only": false, "value": "2026-10-27T09:30:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VRMG-3792-4RX3", "record": "GHSA-VRMG-3792-4RX3", "field": "modified"}, {"timestamp": "2026-10-27T15:08:50.630Z", "date_only": false, "value": "2026-10-27T15:08:50.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111459", "record": "FKIE_CVE-2026-111459", "field": "lastModified"}, {"timestamp": "2026-10-27T16:14:33.333Z", "date_only": false, "value": "2026-10-27T16:14:33.333001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3myumyyijui2v", "record": "CVE-2026-111459", "field": "creation_timestamp", "uuid": "2a25ff7b-6c82-4278-905e-f7a6b430d7b0", "content": "~Cybergcca~\nCritical PHP RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619 are in CISA KEV; update affected products.\n-\nIOCs: CVE-2026-109618, CVE-2026-109619, CVE-2026-111459\n-\n#CVE #Cybersecurity #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3myumyyijui2v"}], "metrics": {"as_of": "2026-11-01T09:21:52.524Z", "anchors": {"origin": {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 465712.524229, "hours": 129.3645900636111, "days": 5.390191252650463, "min_seconds": 379312.524229, "max_seconds": 465712.524229, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1393", "record": "CERTFR-2026-AVI-1393", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T09:21:52.524Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}