PT-2026-49632 · Moxa · Nport 6000-G2 Series

Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-10825

Mitre

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.

Fix

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2026-10825

Affected Products

Nport 6000-G2 Series

References · 2

• https://moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10825 · Security Note