CVE-2026-85431highCWE-345

CVE-2026-85431: high-severity vulnerability in themoos essential-moos

MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection

Published · Updated

Follow this CVE+ Monitor essential-moos

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 3.4%
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
themoos · essential-moos
Related CVEs — themoos essential-moos

In the same product, most dangerous first.

CVE-2026-85436HIGHMOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP LengthEPSS 2.1%CVE-2026-85430HIGHMOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram RepublishingEPSS 1.7%CVE-2026-85433CRITICALMOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route ReconfigurationEPSS 0.8%CVE-2026-85427CRITICALMOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEEPSS 0.6%