Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-0715

22
FAUCET Score

CVE-2026-0715 affects Moxa Arm-based industrial computers running Moxa Industrial Linux Secure, where a device-unique bootloader password allows physical access to the bootloader menu via a serial interface. The vulnerability carries a CVSS score of 6.8 (Medium), indicating that an attacker with physical access could cause a temporary denial-of-service by reflashing a valid image, but full system takeover or arbitrary code execution is prevented by digital signature verification. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.4CPE matchmatch criteria
cpe:2.3:o:moxa:uc-1222a_firmware:*:*:*:*:*:*:*:*
<= 1.4CPE matchmatch criteria
cpe:2.3:o:moxa:uc-2222a-t-us_firmware:*:*:*:*:*:*:*:*
<= 1.4CPE matchmatch criteria
cpe:2.3:o:moxa:uc-2222a-t_firmware:*:*:*:*:*:*:*:*
<= 1.4CPE matchmatch criteria
cpe:2.3:o:moxa:uc-2222a-t-ap_firmware:*:*:*:*:*:*:*:*
<= 1.4CPE matchmatch criteria
cpe:2.3:o:moxa:uc-2222a-t-eu_firmware:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.0HIGH

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
PHYSICAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.22%
Probability of exploitation in next 30 days
EPSS Percentile
13.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0022 is in the 24th percentile among its peer group of 1,532 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (6)

gcpvendor investigatingvia llm_extracted
View patch
nessusvendor investigatingvia llm_extracted
nextcloudvendor investigatingvia llm_extracted
View patch
nomadvendor investigatingvia llm_extracted
View patch
pterodactylvendor investigatingvia llm_extracted
View patch
pythonvendor investigatingvia llm_extracted
View patch

Vendor Advisories (6)

nextcloudllm-nextcloud-a0c75b3ec632acb1

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026
nessusllm-nessus-61b842b2ac5a6768

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026
gcpllm-gcp-749b47105b422b03

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026
nomadllm-nomad-af0bf9b2a7672e0b

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026
pythonllm-python-381111d1db9a8ebb

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026
pterodactylllm-pterodactyl-a04a9baa9068a320

CVE-2026-0714, CVE-2026-0715: Multiple Vulnerabilities in Industrial Computers

Feb 6, 2026

References

moxa.com / en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers
Vendor Advisory