Critical Authentication Bypass Reported in RISS SRL MOMA Seismic Stations

#cybersecurity #infosec

Summary

RISS SRL MOMA Seismic Station versions <=v2.4.2520 contain a critical vulnerability (CVE-2026-1632) that allows unauthenticated attackers to take full control of the device via its web interface.

Take Action:

If you use MOMA Seismic Station seismic stations, isolate them off the public internet immediately and put them behind a firewall or VPN. Since the vendor hasn't responded with a patch, your only real defense is strict network isolation. And consider if it's feasible to replace these devices, especially if they are networked or connected to public systems.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines