CVE-2026-85428CWE-306

CVE-2026-85428

Critical · published September 4, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00814 · 56.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-04T03:17Z
Affected products (1)
ProductVersionsFixed in
themoos/core-moos≤ 10.4.0—
References (5)
https://github.com/themoos/core-moos · [email protected]https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/DB/HTTPConnection.cpp#L196 · [email protected]https://github.com/themoos/core-moos/commit/7e3aecdbf5fe47980ea9399340c77940991a6fa5 · [email protected]https://github.com/themoos/core-moos/pull/77 · [email protected]https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-moosdb-http-server-unauthenticated-variable-write · [email protected]
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 1%
    epss
  • 03 SEP 22:38Z
    MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
    cvelistv5