VULNERABILITY INTELLIGENCE
CVE-2026-10825
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-06-16
Last modified2026-10-26
Description
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.
Weakness classification
- psirt@moxa.com: CWE-1287