CVE-2026-0714

CVE-2026-0714 is a physical attack vulnerability affecting Moxa industrial computers running Moxa Industrial Linux 3 with TPM-backed LUKS full-disk encryption. Exploitation requires invasive physical access to the device to capture TPM communications via the SPI bus, potentially leading to offline decryption of eMMC contents. While the CVSS score is 6.8 MEDIUM, reflecting high confidentiality, integrity, and availability impacts, the attack complexity is low once physical access is achieved. This vulnerability is not actively exploited, lacks public exploit code, and has garnered minimal community discussion, with no media coverage.