CVE-2026-85441

MOOS core-moos through 10.4.0 contains a denial-of-service vulnerability in CMOOSMsg::operator>> , which fails to validate that serialized string lengths are non-negative. An unauthenticated attacker can send a crafted message with a negative length value to the MOOSDB port , triggering an ...