CVE-2026-85450

HIGH 7.5

MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability.

CWE	CWE-770
Vendor	themoos
Product	core-moos
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for themoos core-moos

Be the first to know when new high vulnerabilities affecting themoos core-moos are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

themoos / core-moos

0 ≤ 10.4.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/themoos/core-moos/pull/79 github.com: https://github.com/themoos/core-moos/commit/dfef92b3bc31886bc47e4d680aef583b78cb8d72 github.com: https://github.com/themoos/core-moos github.com: https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/DB/HTTPConnection.cpp#L167 vulncheck.com: https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-moosdb-http-server-resource-exhaustion

Credits

Vlatko Kosturjak