This vulnerability (CVE-2026-10825) in Moxa NPort 6000-G2 Series devices involves improper validation of input types in the WebSocket API, specifically JSON-based requests. Due to insufficient input validation, an attacker with low privileges and authentication can send crafted requests that trigger a denial-of-service condition, potentially causing service disruption and unexpected device reboots. The CVSS 4.0 score is 7.1, indicating a high severity impact. The affected version explicitly identified is 1.0. No vendor advisory or patch information is provided, and the device is not a cloud service, so remediation status is unknown.

The impact of this vulnerability is denial of service, which can disrupt normal device operation and may cause unexpected reboots. This could affect availability of the device and any dependent systems. Exploitation requires low-privileged authenticated access, which limits the attack surface to some extent but still poses a significant risk in environments where such access is possible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor Moxa's advisories for updates. Until a patch is available, restrict access to the WebSocket API to trusted users and networks to reduce the risk of exploitation.