What’s Vulnerable › Vulnerabilities

CVE-2026-1632: RISS SRL MOMA Seismic Station Missing Authentication for Critical Function

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-306

Description

MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, which could allow an unauthenticated attacker to modify configuration settings, acquire device data or remotely reset the device.

Affected products

• RISS SRL MOMA Seismic Station: through Version v2.4.2520

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-034-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-03

Get alerted when CVE-2026-1632 or the next vulnerability affects your stack