{"affected":[{"defaultStatus":"unaffected","product":"NPort 6000-G2 Series","source":"CNA: Moxa","vendor":"Moxa","versions":[{"lessThanOrEqual":"1.1.0","status":"affected","version":"1.0","versionType":"custom"},{"status":"unaffected","version":"1.2.0","versionType":"custom"}]}],"cveId":"CVE-2026-10825","cwes":["CWE-1287"],"description":"A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.","epss":{"date":"2026-11-01","percentile":0.15136,"score":0.0024},"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: Moxa","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793600006343,"publishedAt":1781599917193,"references":[{"source":"CNA: Moxa","tags":["vendor-advisory"],"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers"}],"remediation":[{"kind":"fix","source":"CNA: Moxa","text":"Please refer to the security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers"}],"revision":"47f386f44c53df80ccb56c1b225bc57053288c046970946c1152ae853666bb25","sources":[{"modifiedAt":1793600006343,"name":"CNA: Moxa","retrievedAt":1793603309695,"url":"https://www.cve.org/CVERecord?id=CVE-2026-10825"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793603318308,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-10825"}],"ssvc":{"assessedAt":1781612671669,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Improper JSON Input Validation in WebSocket API Leads to Denial of Service","updatedAt":1793603318308}