https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T12:17:06.629804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00965 bdu:2016-00965 2026-10-27T12:17:06.633962+00:00 bdu:2016-00965 https://cve.radiocsirt.org/vuln/cnvd-2015-07812 cnvd-2015-07812 2026-10-27T12:17:06.633993+00:00 cnvd-2015-07812 https://cve.radiocsirt.org/vuln/euvd-2026-94286 EUVD-2026-94286 2026-10-27T12:17:06.634008+00:00 EUVD-2026-94286 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6480 fkie_cve-2015-6480 2026-10-27T12:17:06.634020+00:00

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.

 https://cve.radiocsirt.org/vuln/ghsa-5q6w-q4p8-f56h GHSA-5q6w-q4p8-f56h 2026-10-27T12:17:06.634047+00:00

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.

 https://cve.radiocsirt.org/vuln/gsd-2015-6480 gsd-2015-6480 2026-10-27T12:17:06.634063+00:00 gsd-2015-6480 https://cve.radiocsirt.org/vuln/icsa-15-328-01 ICSA-15-328-01 — Moxa OnCell Central Manager Vulnerabilities 2026-10-27T12:17:06.634073+00:00

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session. The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.