Denial of Service Vulnerability in MOOSDB HTTP Server by MOOS

CVE-2026-85450

What is CVE-2026-85450?

The Core MOOS product is affected by a denial of service vulnerability within the MOOSDB HTTP server, which allows attackers to create an excessive number of connections. This flaw stems from the server's inability to limit the number of concurrent threads and connections, enabling malicious actors to send a continuous flow of header data that can deplete server memory and threads, ultimately leading to service unavailability. Addressing this vulnerability is crucial for maintaining system stability and availability.

References