CVE-2026-85433criticalCWE-862

CVE-2026-85433: fallo crítico en themoos essential-moos

MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear essential-moos

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.8%
MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
themoos · essential-moos
CVEs relacionadas — themoos essential-moos

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-85431HIGHMOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet InjectionEPSS 3.4%CVE-2026-85436HIGHMOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP LengthEPSS 2.1%CVE-2026-85430HIGHMOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram RepublishingEPSS 1.7%CVE-2026-85427CRITICALMOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEEPSS 0.6%