CVE-2026-85433— MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
Quick assessment
Affected
themoos essential-moos
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MOOS 版本 essential-moos 的 pShare（版本 ≤ 10.0.1）未能对 PSHARE_CMD 消息进行适当的授权验证，使得任何发布者都可以在运行时重新配置网络路由和监听器。攻击者可以发送经过构造的 PSHARE_CMD 消息（包含 cmd=output 或 cmd=input 参数），从而在任意地址上开启新的监听器，并将总线上 的流量重定向或复制到由攻击者控制的目的地。
Possible ATT&CK Techniques 1 AI
T1059.003 · Windows Command Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85433
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
Source: CVE Program / CVE List V5
Vulnerability Description
MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| themoos | essential-moos | 0 ~ 10.0.1 | - |
|
II. Public POCs for CVE-2026-85433
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85433
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-85433 (2)
Security Blog Posts for CVE-2026-85433 (1)
Same Patch Batch · themoos · 2026-09-03 · 18 CVEs total
| CVE-2026-85440 | 9.8 CRITICAL | MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet |
| CVE-2026-85424 | 9.8 CRITICAL | MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_ |
| CVE-2026-85428 | 9.8 CRITICAL | MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write |
| CVE-2026-85430 | 9.1 CRITICAL | MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing |
| CVE-2026-85452 | 8.8 HIGH | MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers |
| CVE-2026-85455 | 8.2 HIGH | MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet |
| CVE-2026-85432 | 8.2 HIGH | MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity |
| CVE-2026-85427 | 8.1 HIGH | MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSI |
| CVE-2026-85443 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service |
| CVE-2026-85431 | 7.5 HIGH | MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection |
| CVE-2026-85441 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Leng |
| CVE-2026-85450 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion |
| CVE-2026-85436 | 7.5 HIGH | MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length |
| CVE-2026-85442 | 7.5 HIGH | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation |
| CVE-2026-85451 | 7.1 HIGH | MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphra |
| CVE-2026-85454 | 6.1 MEDIUM | MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling |
| CVE-2026-85453 | 6.1 MEDIUM | MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting |
IV. Related Vulnerabilities
Same product: essential-moos
-
CVE-2026-85436
MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corrupti -
CVE-2026-85431
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticat -
CVE-2026-85430
MOOS essential-moos through 10.0.1 pShare Unauthenticated UD -
CVE-2026-85427
MOOS essential-moos through 10.0.1 pAntler Remote Code Execu
Same vendor: themoos
-
CVE-2026-85455
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via -
CVE-2026-85454
MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in -
CVE-2026-85453
MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross -
CVE-2026-85452
MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MO -
CVE-2026-85451
MOOS core-moos through 10.4.0 Remote Process Termination via
Same weakness: CWE-862
-
CVE-2026-67398
WHMCS多版本2Checkout支付网关缺失授权漏洞 -
CVE-2026-70178
Microsoft Fabric Elevation of Privilege Vulnerability -
CVE-2026-85395
UnoPim before 2.1.3 Missing Authorization on Integration Man -
CVE-2026-85390
Checkmate through 3.11.0 Missing Authorization on Maintenanc -
CVE-2026-78596
Missing Authorization in Kibana Leading to Unauthorized Cros
V. Comments for CVE-2026-85433
No comments yet