CVE-2026-10829

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-10829

Key Details

CVE	CVE-2026-10829
CVSS Score / Version	8.6 (High) / CVSS v4.0
Updated	2026-06-17
Affected products	Moxa NPort W2150A-W4/W2250A-W4 Series and Moxa NPort W2150A/W2250A Series
Classified as	CWE-121 (Stack-based Buffer Overflow)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Moxa	NPort W2150A-W4/W2250A-W4 Series
Moxa	NPort W2150A/W2250A Series

Vendor

Product

Affected Versions

Patch Status

Moxa

NPort W2150A-W4/W2250A-W4 Series

Moxa

NPort W2150A/W2250A Series

Subsystems	General OT
Sectors	Multiple

What to Know

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges. (NVD)

What to Do

Monitor Moxa's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-10829
CVE	https://www.cve.org/CVERecord?id=CVE-2026-10829

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-10829

CVE