CVE-2026-85431

HIGH 7.5CVE-2026-85431 · Published 03/09/2026 · updated 14/10/2026

In short

CVE-2026-85431 is a HIGH (CVSS 7.5) vulnerability affecting essential-moos (themoos).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
essential-moos themoos	`≤ 10.0.1`	No fix yet

Description

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

References

themoos/essential-moos · Product
themoos/essential-moos · Product
themoos/essential-moos commit d8441ea · Patch
themoos/essential-moos#19 · Patch
vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pmoosbridge-unauthenticated-udp-packet-injection · Third Party Advisory

More vulnerabilities in essential-moos

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

essential-moos

themoos

≤ 10.0.1

No fix yet

Description

More vulnerabilities in essential-moos

See all →