CVE-2026-85431: Insufficient Verification of Data Authenticity in themoos essential-moos
Description
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.
CVSS v4.0
Score 8.7high
Affected software
themoos
essential-moos
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85431 describes an unauthenticated UDP packet injection vulnerability in the pMOOSBridge component of MOOS essential-moos up to version 10.0.1. When pMOOSBridge is configured with UDPListen, attackers can send specially crafted UDP packets to the listening port. These packets can spoof source and community identifiers, enabling injection of arbitrary variables into the local MOOS community. This represents insufficient verification of data authenticity in the affected software.
Potential Impact
An attacker can inject arbitrary variables into the local MOOS community without authentication, potentially disrupting normal operations or causing unintended behavior. The vulnerability allows remote network-based exploitation without user interaction or privileges, increasing the risk of impact.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, consider disabling UDPListen configuration if feasible or restricting network access to the UDP port to trusted sources.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-03T19:50:54.514Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a99fa4aacd9273b4994b228
Added to database: 09/03/2026, 22:52:58 UTC
Last enriched: 09/07/2026, 12:24:28 UTC
Last updated: 10/18/2026, 18:48:24 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.