CVE-2026-85430

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-85430
MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local MOOS community under spoofed identities, or send malformed datagrams to crash the pShare process.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/themoos/essential-moos Product
https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp#L132 Issue Tracking
https://github.com/themoos/essential-moos/commit/53729b6325a991a8dbd84dcd04e4707f3e592fd6 Issue Tracking Patch
https://github.com/themoos/essential-moos/pull/18 Issue Tracking Patch
https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthenticated-udp-datagram-republishing Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:themoos:essential-moos:*:*:*:*:*:*:*:*
History

14 Oct 2026, 14:53

Type Values Removed Values Added
References () https://github.com/themoos/essential-moos - () https://github.com/themoos/essential-moos - Product
References () https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp#L132 - () https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp#L132 - Issue Tracking
References () https://github.com/themoos/essential-moos/commit/53729b6325a991a8dbd84dcd04e4707f3e592fd6 - () https://github.com/themoos/essential-moos/commit/53729b6325a991a8dbd84dcd04e4707f3e592fd6 - Issue Tracking, Patch
References () https://github.com/themoos/essential-moos/pull/18 - () https://github.com/themoos/essential-moos/pull/18 - Issue Tracking, Patch
References () https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthenticated-udp-datagram-republishing - () https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthenticated-udp-datagram-republishing - Third Party Advisory
CPE cpe:2.3:a:themoos:essential-moos:*:*:*:*:*:*:*:*
First Time Themoos
Themoos essential-moos
Information

Published : 2026-09-03 23:17

Updated : 2026-10-14 14:53

NVD link : CVE-2026-85430

Mitre link : CVE-2026-85430

CVE.ORG link : CVE-2026-85430

JSON object : View

Products Affected

themoos

  • essential-moos
CWE
CWE-345

Insufficient Verification of Data Authenticity