CVE-2026-10825

Vulnerability Description

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.

Related Weaknesses (CWE)

CWE-1287

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cv

FAQ

What is CVE-2026-10825?

CVE-2026-10825 is a documented vulnerability. A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted r...

How severe is CVE-2026-10825?

CVSS scoring is not yet available for CVE-2026-10825. Check NVD for updates.

Is there a patch for CVE-2026-10825?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.