CVE-2026-85433
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.
| CWE | CWE-862 |
| Vendor | themoos |
| Product | essential-moos |
| Published | Sep 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for themoos essential-moos
Be the first to know when new critical vulnerabilities affecting themoos essential-moos are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
themoos / essential-moos
0 ≤ 10.0.1
References
github.com: https://github.com/themoos/essential-moos/pull/20 github.com: https://github.com/themoos/essential-moos/commit/8e51cedcbd8de9781adec2e9cce354f51750a547 github.com: https://github.com/themoos/essential-moos github.com: https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Share.cpp#L813 vulncheck.com: https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthorized-runtime-route-reconfiguration
Credits
Vlatko Kosturjak