CVE-2026-85430

CRITICAL 9.1

MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local MOOS community under spoofed identities, or send malformed datagrams to crash the pShare process.

CWE	CWE-345
Vendor	themoos
Product	essential-moos
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for themoos essential-moos

Be the first to know when new critical vulnerabilities affecting themoos essential-moos are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Affected Versions

themoos / essential-moos

0 ≤ 10.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/themoos/essential-moos/pull/18 github.com: https://github.com/themoos/essential-moos/commit/53729b6325a991a8dbd84dcd04e4707f3e592fd6 github.com: https://github.com/themoos/essential-moos github.com: https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp#L132 vulncheck.com: https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthenticated-udp-datagram-republishing

Credits

Vlatko Kosturjak