CVE-2026-85431

HIGH 7.5

MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

CWE	CWE-345
Vendor	themoos
Product	essential-moos
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for themoos essential-moos

Be the first to know when new high vulnerabilities affecting themoos essential-moos are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

themoos / essential-moos

0 ≤ 10.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/themoos/essential-moos/pull/19 github.com: https://github.com/themoos/essential-moos/commit/d8441eac57d04ee89e7b82723480d10a558b45d6 github.com: https://github.com/themoos/essential-moos github.com: https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pMOOSBridge/MOOSUDPLink.cpp#L21 vulncheck.com: https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pmoosbridge-unauthenticated-udp-packet-injection

Credits

Vlatko Kosturjak