[Control Systems] Moxa security advisory (AV26-610)

Serial number: AV26-610
Date: June 17, 2026

On June 16, 2026, Moxa published security advisories to address vulnerabilities in the following products:

• NPort 6000-G2 Series - version v1.1.0 and prior
• NPort W2150A-W4/W2250A-W4 Series - firmware version v1.5 and prior
• NPort W2150A/W2250A Series - firmware version v2.3 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. 

• CVE-2026-10825: Improper Validation of Input Vulnerability in Serial Device Servers
• CVE-2026-10828, CVE-2026-10829: Use of Externally-Controlled Format String and Stack-based Buffer Overflow Vulnerabilities in Serial Device Servers
• Moxa Security Advisories (en anglais seulement)