CVE-2026-85430

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...

CVE-2026-85436 MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2026-85436

MOOS essential-moos through version 10.0.1 is affected by a buffer overflow in CMOOSUDPLink::ReadPktFromArray() within the pMOOSBridge component. The root cause is that negative declared lengths in received UDP datagrams trigger an oversized memcpy operation, writing past the destination buffer a...

CVE-2026-85431 MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

CVE-2026-85430

MOOS essential-moos (through version 10.0.1) contains an authentication bypass in the pShare component, which accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. An unauthenticated network attacker can inject crafted messages into the local MOOS c...

CVE-2026-85430 MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...

PT-2026-85285

Name of the Vulnerable Software and Affected Versions MOOS essential-moos versions prior to 10.0.2 Description A buffer overflow exists in the CMOOSUDPLink::ReadPktFromArray function. Remote attackers can corrupt heap memory by sending crafted UDP datagrams with negative declared lengths to the...

CVE-2026-85427: Download of Code Without Integrity Check

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

CVE-2026-85431: Insufficient Verification of Data Authenticity

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

CVE-2026-85430: Insufficient Verification of Data Authenticity

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...