https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T13:23:03.226517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00966 bdu:2016-00966 2026-10-27T13:23:03.230619+00:00 bdu:2016-00966 https://cve.radiocsirt.org/vuln/cnvd-2015-07813 cnvd-2015-07813 2026-10-27T13:23:03.230651+00:00 cnvd-2015-07813 https://cve.radiocsirt.org/vuln/euvd-2026-94288 EUVD-2026-94288 2026-10-27T13:23:03.230665+00:00 EUVD-2026-94288 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6481 fkie_cve-2015-6481 2026-10-27T13:23:03.230677+00:00

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.

 https://cve.radiocsirt.org/vuln/ghsa-4p5v-xhv3-w87m GHSA-4p5v-xhv3-w87m 2026-10-27T13:23:03.230702+00:00

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.

 https://cve.radiocsirt.org/vuln/gsd-2015-6481 gsd-2015-6481 2026-10-27T13:23:03.230718+00:00 gsd-2015-6481 https://cve.radiocsirt.org/vuln/icsa-15-328-01 ICSA-15-328-01 — Moxa OnCell Central Manager Vulnerabilities 2026-10-27T13:23:03.230728+00:00

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session. The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.