Moxa NPort Improper Authorization Vulnerability Leading to DoS (CVE-2026-10831)

Vulnerability Overview Vulnerability Name: CVE-2026-10831: Improper Authorization Vulnerability in Serial Device Servers Description: A denial-of-service vulnerability exists in NPort devices due to improper access control on the command port. The command interface fails to correctly verify whether the sender is associated with a valid data port session prior to receiving the interrupt signal command. A remote attacker with network access can send specially crafted requests to interrupt the serial communication of active user sessions. Severity: Medium Release Date: June 16, 2026 References: CVE-2026-10831 (CNA: Moxa) Affected Products Affected Products: - NPort 6000 Series (including NPort 6100/6200 Series and NPort 6400/6600 Series) - CN2600 Series Affected Versions: - NPort 6000 Series: Firmware versions v2.3 and earlier - CN2600 Series: Firmware versions v4.6 and earlier Remediation Solution: - Contact Moxa Technical Support to obtain security patches (NPort 6000 Series: v2.3.9; CN2600 Series: v4.6.11). Mitigation: - For users unable to update firmware, the following recommended mitigation measures are provided as alternatives to reduce risks associated with the vulnerability: - Refer to the "General Security Recommendations" section to further strengthen your security context. General Security Recommendations No specific POC code or exploit code is provided on this page. Acknowledgments Thanks to Artur Witek for reporting this vulnerability and collaborating with Moxa to enhance product security and contribute to providing better customer service. Revision History Version: 1.0 Description: Initial release Release Date: June 16, 2026 Related Products CN2600 Series NPort 6100/6200 Series NPort 6400/6600 Series Related Security Advisories Multiple Weak Cryptographic Algorithm Vulnerabilities in CN2600 Series Contact Us If you have concerns about potential cybersecurity vulnerabilities, please contact Moxa, and our technical support staff will get in touch with you. Follow Us Social media links (specific links not provided) Subscribe Enter your email address to subscribe to the latest updates on Moxa solutions. Other Information Links to privacy policy, terms of use, sitemap, etc. (specific links not provided) Language Selection Global/English Europe/English Japan/Japanese China/Simplified Chinese Taiwan/Traditional Chinese Copyright Information © 2026 Moxa Inc. All rights reserved.

Goal Reached Thanks to every supporter — we hit 100%!

Moxa NPort Improper Authorization Vulnerability Leading to DoS (CVE-2026-10831)