CVE-2026-85426CWE-78command-injection

CVE-2026-85426

Critical · published September 4, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00922 · 60.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-04T03:17Z
References (5)
https://github.com/moos-ivp/moos-ivp · [email protected]https://github.com/moos-ivp/moos-ivp/blob/1de9ae146cd63c209e8c3fd81611a4ed2472971b/ivp/src/uMemWatch/MemWatch.cpp#L182 · [email protected]https://github.com/moos-ivp/moos-ivp/commit/0b2bd991b0ca7139b1edcf271473d33e7eccfc20 · [email protected]https://github.com/moos-ivp/moos-ivp/pull/121 · [email protected]https://www.vulncheck.com/advisories/moos-ivp-through-24.8.1-umemwatch-command-injection-via-moos-client-names · [email protected]
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 1%
    epss
  • 03 SEP 22:38Z
    MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names
    cvelistv5