CISA issued an advisory for two vulnerabilities in Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier. The flaws, identified as CVE-2026-109812 and CVE-2026-109813, allow attackers with adjacent network access to steal sensitive data or compromise communications. Moxa has released firmware version 1.4.1 to fix the issues, which users can install via the device web console. The vulnerabilities affect critical infrastructure sectors including energy and water systems worldwide.
Read the full story at cisa.gov.
Photo: Peggy_Marco / Pixabay
