CVE-2026-85428— MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
Quick assessment
Affected
themoos core-moos
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MOOS（核心组件 core-moos）版本 10.4.0 及之前版本存在一个认证绕过漏洞，位于可选的 MOOSDB HTTP 服务器中。该漏洞允许未经认证的用户写入变量。攻击者可以向 MOOSDB HTTP 服务器的端口发送包含变量名和值的 HTTP 请求，从而在无认证的情况下修改 MOOS 变量，包括执行器（actuator）和覆盖命令（override commands）。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85428
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
Source: CVE Program / CVE List V5
Vulnerability Description
MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-85428
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85428
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-85428 (2)
Vendor Advisories for CVE-2026-85428 (1)
Vendor Pages for CVE-2026-85428 (1)
Same Patch Batch · themoos · 2026-09-03 · 18 CVEs total
| CVE-2026-85440 | 9.8 CRITICAL | MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet |
| CVE-2026-85433 | 9.8 CRITICAL | MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration |
| CVE-2026-85424 | 9.8 CRITICAL | MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_ |
| CVE-2026-85430 | 9.1 CRITICAL | MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing |
| CVE-2026-85452 | 8.8 HIGH | MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers |
| CVE-2026-85455 | 8.2 HIGH | MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet |
| CVE-2026-85432 | 8.2 HIGH | MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity |
| CVE-2026-85427 | 8.1 HIGH | MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSI |
| CVE-2026-85443 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service |
| CVE-2026-85431 | 7.5 HIGH | MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection |
| CVE-2026-85441 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Leng |
| CVE-2026-85450 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion |
| CVE-2026-85436 | 7.5 HIGH | MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length |
| CVE-2026-85442 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation |
| CVE-2026-85451 | 7.1 HIGH | MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphra |
| CVE-2026-85454 | 6.1 MEDIUM | MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling |
| CVE-2026-85453 | 6.1 MEDIUM | MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting |
IV. Related Vulnerabilities
Same product: core-moos
-
CVE-2026-85455
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via -
CVE-2026-85454
MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in -
CVE-2026-85453
MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross -
CVE-2026-85451
MOOS core-moos through 10.4.0 Remote Process Termination via -
CVE-2026-85450
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Ex
Same vendor: themoos
-
CVE-2026-85455
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via -
CVE-2026-85454
MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in -
CVE-2026-85453
MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross -
CVE-2026-85452
MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MO -
CVE-2026-85451
MOOS core-moos through 10.4.0 Remote Process Termination via
Same weakness: CWE-306
-
CVE-2026-75754
ASUS Control Center 硬编码凭据致SSRF与认证缺失 -
CVE-2026-70352
Azure AI Language Elevation of Privilege Vulnerability -
CVE-2026-85424
MOOS core-moos through 10.4.0 Missing Authentication for MOO -
CVE-2026-84840
tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingF -
CVE-2026-84839
tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance Console w
V. Comments for CVE-2026-85428
No comments yet