CVE-2026-3867Disclosure

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons

Weakness type (CWE)

CWE-282

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-04-27); latest day: 1
4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-27	3	Disclosure2General1
2026-04-28	1	Disclosure1

Full discourse4 posts

CCB Alert@CCBalert163d
Disclosure
Warning: Info Disclosure & Buffer Overflow in Moxa #SecureRouter. #CVE-2026-3867 CVSS: 6.0 & #CVE-2026-3868 CVSS: 8.7. An auth user may access an exported config with the admin hash, while an unauth attacker can trigger reboot-required #DoS via HTTPS! #Patch #Patch #Patch
Post summary
The post issues a warning about Info Disclosure and Buffer Overflow vulnerabilities in Moxa SecureRouter (CVE‑2026‑3867/3868), noting their CVSS scores and potential impacts, but offers no PoC, exploit, patch, or evidence of active exploitation.
02000212
7.2K followersView on X
CVE@CVEnew163d
Disclosure
CVE-2026-3867 An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated use… https://www.cve.org/CVERecord?id=CVE-2026-3867
Post summary
The post announces the identification of CVE-2026-3867, an improper ownership management flaw affecting Moxa’s Secure Router, with no evidence of exploitation or mitigation discussed.
0000087
57.3K followersView on X
CVEarity@CVEarity164d
Disclosure
⚡ New CVE Alert: CVE-2026-3867 📊 Severity: 6.0 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3867 #CVE-2026-3867 #CVE #Medium #CyberSecurity #InfoSec https://t.co/CADJzgZFkH
Post summary
The tweet announces the existence of CVE‑2026‑3867, providing basic severity and scope information but no deeper technical data or evidence of exploitation.
0000039
141 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds164d
General
CVE-2026-3867 Improper Ownership Management in Moxa Secure Router Configuration File Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3867
Post summary
The post references CVE‑2026‑3867 with a title describing an ownership‑management flaw and links to a vulnerability page, but contains no evidence of PoC, exploitation, patch, or detailed technical analysis.
0000065
4.0K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-3867

CCB Alert@CCBalertDisclosure

The post issues a warning about Info Disclosure and Buffer Overflow vulnerabilities in Moxa SecureRouter (CVE‑2026‑3867/3868), noting their CVSS scores and potential impacts, but offers no PoC, exploit, patch, or evidence of active exploitation.

CVE@CVEnewDisclosure

The post announces the identification of CVE-2026-3867, an improper ownership management flaw affecting Moxa’s Secure Router, with no evidence of exploitation or mitigation discussed.

CVEarity@CVEarityDisclosure

The tweet announces the existence of CVE‑2026‑3867, providing basic severity and scope information but no deeper technical data or evidence of exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post references CVE‑2026‑3867 with a title describing an ownership‑management flaw and links to a vulnerability page, but contains no evidence of PoC, exploitation, patch, or detailed technical analysis.