Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck
CVE-2026-85455MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
High 8.2
In plain English
A high-severity out-of-bounds read in core-moos from themoos. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.7%top 47.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication.
Affected products (as reported)
Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
References
- Pull Request #75 issue-tracking, patch
- Proposed fix commit (pull request not merged) patch
- https://github.com/themoos/core-moos product
- MOOSCommPkt.cpp (verified sink) technical-description
- VulnCheck Advisory: MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet third-party-advisory