Stored Cross-Site Scripting Vulnerability in MOOS Core-MOOS Product

CVE-2026-85453

What is CVE-2026-85453?

The MOOS core-moos version 10.4.0 and earlier is susceptible to a stored cross-site scripting vulnerability that allows malicious actors to inject harmful scripts. This issue arises when database contents are rendered on MOOSDB HTTP pages without adequate escaping, enabling any MOOS publisher to set variable values that contain script payloads. As a result, these scripts can execute in the browsers of operators when they access the compromised web interface, leading to potential data theft or unauthorized actions.

References