CVE-2026-85433

CRITICAL 9.8CVE-2026-85433 · Published 03/09/2026 · updated 14/10/2026

In short

CVE-2026-85433 is a CRITICAL (CVSS 9.8) vulnerability affecting essential-moos (themoos).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
essential-moos themoos	`≤ 10.0.1`	No fix yet

Description

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.

References

themoos/essential-moos · Product
themoos/essential-moos · Product
themoos/essential-moos commit 8e51ced · Patch
themoos/essential-moos#20 · Patch
vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pshare-unauthorized-runtime-route-reconfiguration · Third Party Advisory

More vulnerabilities in essential-moos

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

essential-moos

themoos

≤ 10.0.1

No fix yet

Description

More vulnerabilities in essential-moos

See all →