7.1Yüksek
CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of Service
Açıklama
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.
Zayıflık türü (CWE):
CWE-1287
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Moxa | NPort 6000-G2 Series | 1.0 – ≤ 1.1.0, fixed 1.2.0 |