Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-10825

Improper JSON Input Validation in WebSocket API Leads to Denial of Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Moxa

Description

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa NPort 6000-G2 Series

Default version status: unaffected

  • 1.0 to ≤ 1.1.0affected
  • 1.2.0unaffected

References