[Control Systems] Moxa security advisory (AV26-610)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-610<br /><strong>Date: </strong>June<strong> </strong>17, 2026</p>

On June 16, 2026, Moxa published security advisories to address vulnerabilities in the following products:

• NPort 6000-G2 Series - version v1.1.0 and prior
• NPort W2150A-W4/W2250A-W4 Series - firmware version v1.5 and prior
• NPort W2150A/W2250A Series - firmware version v2.3 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. 

• CVE-2026-10825: Improper Validation of Input Vulnerability in Serial Device Servers
• CVE-2026-10828, CVE-2026-10829: Use of Externally-Controlled Format String and Stack-based Buffer Overflow Vulnerabilities in Serial Device Servers
• Moxa Security Advisories (en anglais seulement)

</div>

Article Link: [Control Systems] Moxa security advisory (AV26-610) - Canadian Centre for Cyber Security