Authentication Bypass in MOOS Essential-MOOS Affects Datagram Processing
CVE-2026-85430

8.8HIGH

Key Information:

Vendor

Themoos

Vendor
CVE Published:
3 September 2026

What is CVE-2026-85430?

The Essential-MOOS product, specifically its pShare component, contains a vulnerability that allows for authentication bypass through the acceptance of UDP datagrams from any source. This flaw enables attackers to inject arbitrary messages into the local MOOS network, masquerading as legitimate users. Additionally, it exposes the pShare process to potential crashes from malformed datagrams. Patch and mitigation plans should be explored as part of a comprehensive security strategy.

Affected Version(s)

essential-moos 0 <= 10.0.1

References

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vlatko Kosturjak
.