Is CVE-2026-10831 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10831 being exploited in the wild.

How severe is CVE-2026-10831?

Informational severity, with a CVSS score of 6.9, published 16 June 2026.

Which products and versions are affected?

Moxa NPort 6000 Series (6100/6200/6400/6600) Firmware v2.3 and earlier; Moxa CN2600 Series Firmware v4.6 and earlier.

Is there a fix for CVE-2026-10831?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10831 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-10831?

Check whether you run Moxa CN2600 Series Firmware, Moxa NPort 6200 Series Firmware, Moxa NPort 6400 Series Firmware or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10831: Moxa NPort and CN2600 denial of service via improper command port access control

CVE-2026-10831 · Severity: info · CVSS 6.9 · Published 2026-06-16

Moxa NPort and CN2600 serial device servers, which connect legacy serial equipment to modern networks, are vulnerable to a denial-of-service attack. An attacker can send unauthorized commands to the device's management port to interrupt active data sessions. This can disrupt industrial operations or communication between connected hardware and the central network.

Vendors: Moxa.

Quick answers

Is CVE-2026-10831 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10831 being exploited in the wild.
How severe is CVE-2026-10831?: Informational severity, with a CVSS score of 6.9, published 16 June 2026.
Which products and versions are affected?: Moxa NPort 6000 Series (6100/6200/6400/6600) Firmware v2.3 and earlier; Moxa CN2600 Series Firmware v4.6 and earlier.
Is there a fix for CVE-2026-10831?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10831 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-10831?: Check whether you run Moxa CN2600 Series Firmware, Moxa NPort 6200 Series Firmware, Moxa NPort 6400 Series Firmware or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authorization vulnerability (CWE-862) exists in the command interface of Moxa NPort and CN2600 serial device servers. The device fails to validate whether a sender on the command port is associated with an active data port session before processing 'break signal' commands. A remote, unauthenticated attacker can exploit this by sending crafted requests over the network to the command port, resulting in the disruption of serial communication for legitimate users. Security patches are available via Moxa Technical Support (v2.3.9 for NPort 6000 and v4.6.11 for CN2600).

Affected products

Moxa NPort 6000 Series (6100/6200/6400/6600) Firmware v2.3 and earlier
Moxa CN2600 Series Firmware v4.6 and earlier

Timeline

2026-06-16: advisory: Moxa released security advisory MPSA-262370
2026-06-16: disclosed: CVE-2026-10831 published

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262370-cve-2026-10831-improper-authorization-vulnerability-in-serial-device-servers

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.