[Control Systems] Moxa security advisory (AV26-393)

Serial number: AV26-393
Date: April 27, 2026

On April 27, 2026, Moxa published a security advisory to address vulnerabilities in the following products:

• TN-4900 Series – firmware version v3.22 and prior
• EDR-8010 Series – firmware version v3.23 and prior
• EDR-G9010 Series – firmware version v3.23.1 and prior
• OnCell G4302-LTE4 Series - firmware version v3.23.0 and prior
• OnCell G4308-LTE4 Series – firmware version v3.23.0 and prior
• EDF-G1002-BP Series – firmware version v3.23 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. 

• CVE-2026-3867, CVE-2026-3868: Improper Ownership Management and Improper Handling of Length Parameter Inconsistency Vulnerabilities in Secure Router
• Moxa Security Advisories