CVE-2026-3867
CVE-2026-3867 is a medium-severity vulnerability with a CVSS 4.0 base score of 6.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-282.
Key facts
- Severity: Medium (CVSS 4.0 base score 6.0)
- EPSS exploit prediction: 0% (15th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2026-25756
- Weakness: CWE-282
- Published:
- Last modified:
Description
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
Frequently asked questions
- What is CVE-2026-3867?
- An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
- How severe is CVE-2026-3867?
- CVE-2026-3867 has a CVSS 4.0 base score of 6.0, rated medium severity.
- Is CVE-2026-3867 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-3867?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2026-3867 have an EU (EUVD) identifier?
- Yes. CVE-2026-3867 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-25756.
- When was CVE-2026-3867 published?
- CVE-2026-3867 was published on 2026-04-27 and last updated on 2026-06-17.
References
Other CWE-282 vulnerabilities
- CVE-2026-23514 — High (CVSS 8.8): Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control…
- CVE-2020-10632 — High (CVSS 8.8): Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of…
- CVE-2025-27254 — High (CVSS 8.0): CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The…
- CVE-2024-39755 — High (CVSS 7.8): A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially…
- CVE-2024-37999 — High (CVSS 7.8): A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application…
- CVE-2023-0386 — High (CVSS 7.8): A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities…