CVE-2026-85428

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85428 MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

CVE-2026-85428

MOOS core-moos through 10.4.0 contains an authentication bypass in its optional MOOSDB HTTP server . Unauthenticated clients can send HTTP requests with variable names and values to the MOOSDB HTTP server port, allowing them to modify MOOS variables including actuator and override commands withou...

PT-2026-85277

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description An authentication bypass exists in the optional MOOSDB HTTP server. This flaw allows unauthenticated clients to modify MOOS variables, including actuator and override commands, by sending HTT...

CVE-2026-85428: Missing Authentication for Critical Function

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...