CVE-2026-85450

Source
https://cve.org/CVERecord?id=CVE-2026-85450
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85450.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-85450
Published
2026-09-03T22:38:38Z
Modified
2026-09-10T03:30:42Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
Details

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability.

Database specific
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85450.json"
}
References

Affected packages

Git / github.com/themoos/core-moos

Affected ranges

Type
GIT
Repo
https://github.com/themoos/core-moos
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed
Database specific
Show details
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "10.4.0"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

10.*
10.0.1-devel
10.0.2-devel
10.0.3-devel-candidate
Other
IvPCompatibility
PreProfilingmerge
v10.*
v10.0.4-alpha

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85450.json"