CVE-2026-1632

CRITICAL

MOMA Seismic Station <v2.4.2520 - Info Disclosure

Title source: llm

Description

MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, which could allow an unauthenticated attacker to modify configuration settings, acquire device data or remotely reset the device.

Scores

CVSS v3 9.1
EPSS 0.0023
EPSS Percentile 45.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Classification

CWE
CWE-306
Status draft

Timeline

Published Feb 03, 2026
Tracked Since Feb 18, 2026