Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck

CVE-2026-85432MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

High 8.2

In plain English

A high-severity authentication bypass by spoofing in core-moos from themoos. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.5%top 56.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party subscriptions by exploiting the disconnect between authenticated connection identity and wire-supplied source attribution.

Affected products (as reported)

Vendor	Product	Versions
themoos	core-moos	0 – through 10.4.0

Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

References

Pull Request #76 issue-tracking, patch
Proposed fix commit (pull request not merged) patch
https://github.com/themoos/core-moos product
MOOSDB.cpp (verified sink) technical-description
VulnCheck Advisory: MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity third-party-advisory