7.1Yüksek

CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of Service

Moxa NPort 6000-G2 Series Yayım: (4 ay önce)

Açıklama

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.

Zayıflık türü (CWE): CWE-1287

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Moxa NPort 6000-G2 Series 1.0 – ≤ 1.1.0, fixed 1.2.0

Kaynaklar ve yamalar