CVE-2026-85431

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-85431
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85431.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-85431
Published
2026-09-03T22:38:25Z
Modified
2026-09-10T08:13:11Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
Details

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-345"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85431.json"
}
References

Affected packages

Git / github.com/themoos/essential-moos

Affected ranges

Type
GIT
Repo
https://github.com/themoos/essential-moos
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
07a2f194fe9cc0e6a208e687989c5e26e3d7343a
Fixed
d8441eac57d04ee89e7b82723480d10a558b45d6
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "10.0.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

10.*
10.0.0-release

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85431.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "300594424167169575358950873904032791545",
                "61883007858212860021230850799476040554",
                "26713429847954373962680148540165339346",
                "176576017025494459070261974773256284628"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-85431-455bab4a",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/themoos/essential-moos/commit/07a2f194fe9cc0e6a208e687989c5e26e3d7343a",
        "target": {
            "file": "Essentials/pMOOSBridge/MOOSUDPLink.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "9420826906018679750123816827085811354",
            "length": 785
        },
        "id": "CVE-2026-85431-ca529658",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/themoos/essential-moos/commit/07a2f194fe9cc0e6a208e687989c5e26e3d7343a",
        "target": {
            "file": "Essentials/pMOOSBridge/MOOSUDPLink.cpp",
            "function": "CMOOSUDPLink::Post"
        }
    }
]
vanir_signatures_modified 
"2026-09-10T08:13:11Z"