CVE-2026-10825 — Improper JSON Input Validation in WebSocket API Leads to Denial of Service

CVE-2026-10825

Improper JSON Input Validation in WebSocket API Leads to Denial of Service PUBLISHED

Description (CNA)

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.

Affected (CNA)

Vendor / product	Versions
Moxa / NPort 6000-G2 Series	affected 1.0 through 1.1.0; unaffected 1.2.0

CWE

CWE-1287

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.