An improper verification of cryptographic signature vulnerability exists in protocol gateways because the…

#!/usr/bin/env python3
"""CVE-2026-86326 Checker - Moxa MGate Missing Firmware Signature Verification
All firmware versions of affected MGate series are vulnerable. No patch exists.
"""
import sys
import re
import urllib.request
import ssl

AFFECTED_KEYWORDS = [
    "mb3170", "mb3270", "mb3180", "mb3280", "mb3480", "mb3660",
    "mb3000", "eip3170", "eip3270", "eip3000",
    "5217", "5105", "5109", "5101", "5114", "5118",
    "w5108", "w5208", "mgate 5"
]

def check(host, port=80):
    ctx = ssl.create_default_context()
    ctx.check_hostname = False
    ctx.verify_mode = ssl.CERT_NONE
    proto = "https" if port == 443 else "http"
    url = f"{proto}://{host}:{port}/"
    print(f"[*] Probing {url} ...")
    try:
        req = urllib.request.Request(url, headers={"User-Agent": "noisgate-CVE-2026-86326/1.0"})
        with urllib.request.urlopen(req, timeout=15, context=ctx) as resp:
            body = resp.read().decode("utf-8", errors="ignore")
            headers = dict(resp.getheaders())
    except Exception as e:
        print(f"[!] Connection failed: {e}")
        print("UNKNOWN")
        return 2

    # Check Server header for Moxa fingerprint
    server = headers.get("Server", "")
    combined = (body + " " + server).lower()

    is_moxa = "moxa" in combined
    is_mgate = "mgate" in combined

    if not is_moxa:
        print(f"[*] Device at {host}:{port} does not appear to be a Moxa product.")
        print("UNKNOWN")
        return 2

    if not is_mgate:
        print(f"[*] Moxa device detected but does not appear to be an MGate gateway.")
        print("UNKNOWN")
        return 2

    # Extract model string
    model_match = re.search(r"(MGate[\s-]*(?:MB|EIP|W)?[\s-]*[\dA-Za-z]+)", body, re.IGNORECASE)
    model = model_match.group(1).strip() if model_match else "MGate (model unknown)"
    print(f"[*] Detected: {model}")

    # Extract firmware version if visible
    fw = re.search(r"(?:firmware|version|fw)[:\s]+[Vv]?([\d.]+)", body, re.IGNORECASE)
    if fw:
        print(f"[*] Firmware: v{fw.group(1)}")

    # Check against affected series
    for kw in AFFECTED_KEYWORDS:
        if kw in combined:
            print(f"[!] AFFECTED: {model} matches vulnerable series keyword '{kw}'")
            print(f"[!] CVE-2026-86326: No firmware signature verification.")
            print(f"[!] ALL firmware versions affected. No patch available.")
            print(f"[!] Ref: Moxa MPSA-269540")
            print("VULNERABLE")
            return 1

    print(f"[*] {model} did not match known affected series keywords.")
    print(f"[*] Verify manually against Moxa MPSA-269540 affected product list.")
    print("PATCHED")
    return 0

if __name__ == "__main__":
    if len(sys.argv) < 2:
        print(f"Usage: {sys.argv[0]} <host> [port]")
        print(f"Example: python3 {sys.argv[0]} 192.168.127.254 80")
        sys.exit(2)
    host = sys.argv[1]
    port = int(sys.argv[2]) if len(sys.argv) > 2 else 80
    sys.exit(check(host, port))