Vulnerability Description
MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local MOOS community under spoofed identities, or send malformed datagrams to crash the pShare process.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/themoos/essential-moos
- https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34
- https://github.com/themoos/essential-moos/commit/53729b6325a991a8dbd84dcd04e4707
- https://github.com/themoos/essential-moos/pull/18
- https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-u
FAQ
What is CVE-2026-85430?
CVE-2026-85430 is a vulnerability with a CVSS score of 9.1 (CRITICAL). MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. ...
How severe is CVE-2026-85430?
CVE-2026-85430 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-85430?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.