PatchSiren cyber security CVE debrief

CVE-2026-10831 Moxa CVE debrief

A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session.

Vendor: Moxa
Product: NPort 6000 Series
CVSS: MEDIUM 6.9
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-16
Original CVE updated: 2026-06-16
Advisory published: 2026-06-16
Advisory updated: 2026-06-16

Who should care

Users of Moxa NPort devices should be aware of this vulnerability and take steps to mitigate it.

Technical summary

The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. It is caused by improper access control on the command port, allowing remote attackers to disrupt serial communication.

Defensive priority

MEDIUM

Recommended defensive actions

Apply patches or updates provided by the vendor (see resourceLinkAnnotations 'ref-4')
Restrict access to the command port
Monitor network activity for suspicious requests

Evidence notes

The vendor is likely Moxa (see evidence in vendor section)

Official resources

CVE-2026-10831 was published on 2026-06-16T15:16:34.490Z and modified on 2026-06-16T15:36:54.090Z.