High severityNVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026

CVE-2026-10829

Description

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/NPort W2150A/W2250A Seriesllm-fuzzy
Range: <=1.5

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-vnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000