Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2026-85440— MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

Quick assessment

Affected

themoos core-moos

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MOOS 核心组件（版本范围：core-moos 至 10.4.0）在 MOOSCommPkt 数据包处理中存在一个预认证堆溢出漏洞。该漏洞允许远程攻击者通过声明负的包长度来写入任意数据。攻击者可利用中的有符号整数检查以及中的负数大小转换，在认证之前的握手（HandShake）阶段溢出一个四字节堆缓冲区。

CVSS 9.8 · Critical Updated Sep 04, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

Source: CVE Program / CVE List V5

Vulnerability Description

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo() and negative size conversion in recv() to overflow a four-byte heap buffer during the HandShake phase before authentication.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
themoos	core-moos	0 ~ 10.4.0	-

II. Public POCs for CVE-2026-85440

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-85440

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-85440 (3)

Vendor Pages for CVE-2026-85440 (1)

🔗 GitHub - themoos/core-moos: A very light weight, easy to use middleware. You will need core-moos above all other components · GitHub product

Other References for CVE-2026-85440 (1)

🔗 MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length | Advisories | VulnCheck third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-85440

Same Patch Batch · themoos · 2026-09-03 · 18 CVEs total

CVE-2026-85433	9.8 CRITICAL	MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
CVE-2026-85424	9.8 CRITICAL	MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_
CVE-2026-85428	9.8 CRITICAL	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
CVE-2026-85430	9.1 CRITICAL	MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing
CVE-2026-85452	8.8 HIGH	MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers
CVE-2026-85455	8.2 HIGH	MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
CVE-2026-85432	8.2 HIGH	MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
CVE-2026-85427	8.1 HIGH	MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSI
CVE-2026-85443	7.5 HIGH	MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
CVE-2026-85431	7.5 HIGH	MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
CVE-2026-85441	7.5 HIGH	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Leng
CVE-2026-85450	7.5 HIGH	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
CVE-2026-85436	7.5 HIGH	MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
CVE-2026-85442	7.5 HIGH	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
CVE-2026-85451	7.1 HIGH	MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphra
CVE-2026-85454	6.1 MEDIUM	MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling
CVE-2026-85453	6.1 MEDIUM	MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting

IV. Related Vulnerabilities

Same product: core-moos

Same vendor: themoos

Same weakness: CWE-787

V. Comments for CVE-2026-85440

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-85440— MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2026-85440

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-85440

III. Intelligence Information for CVE-2026-85440

Patches & Fixes for CVE-2026-85440 (3)

Vendor Pages for CVE-2026-85440 (1)

Other References for CVE-2026-85440 (1)

Same Patch Batch · themoos · 2026-09-03 · 18 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-85440

Leave a comment