CVE-2026-10829Disclosure

LOWCVSS 8.6 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Netlas.io@Netlas_io137d
Disclosure
CVE-2026-10829: Remote code execution in Moxa NPort, 8.6 rating 🔥 A stack-based buffer overflow in Moxa NPort allows an attacker to corrupt memory by sending crafted input. It could achieve remote code execution with root privileges. 👉 https://nt.ls/12mUL
Post summary
The post reports a new CVE (CVE‑2026‑10829) for Moxa NPort, describing a stack‑based buffer overflow RCE with root privileges and an 8.6 CVSS score, and includes a link that likely points to additional resources, but no exploit code, active exploitation, or patch details are provided.
03052720
7.7K followersView on X
Daily CyberSecurity@the_yellow_fall137d
Patch
A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now. #Moxa #NPort #BufferOverflow #CVE202610829 #ICSSecurity #Vulnerability https://securityonline.info/moxa-nport-vulnerability https://t.co/FTmEyBNFux
Post summary
The tweet announces CVE-2026-10829, describing an authenticated RCE that allows root escalation on Moxa NPort devices, and informs readers that patch v1.5.1 is available.
00000191
12.3K followersView on X

Explore more

Back to dashboard