CVE-2026-85427

CRITICAL 9.8CVE-2026-85427 · Published 03/09/2026 · updated 14/10/2026

In short

CVE-2026-85427 is a CRITICAL (CVSS 9.8) vulnerability affecting essential-moos (themoos).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
essential-moos themoos	`≤ 10.0.1`	No fix yet

Description

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSION_FILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntler parses and executes via execvp() without authentication validation.

References

themoos/essential-moos · Product
themoos/essential-moos · Issue Tracking
themoos/essential-moos commit e219f26 · Issue Tracking
themoos/essential-moos#17 · Issue Tracking
vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pantler-remote-code-execution-via-unauthenticated-mission-file · Third Party Advisory

More vulnerabilities in essential-moos

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

essential-moos

themoos

≤ 10.0.1

No fix yet

Description

More vulnerabilities in essential-moos

See all →