CVE-2026-10831CWE-862

Improper Authorization of Break Signal Commands in Devices

Medium · published June 16, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-16T13:46Z
EPSS history
Timeline
  • 16 JUN 13:46Z
    Improper Authorization of Break Signal Commands in Devices
    cvelistv5