Latest high and critical flaws
- CVE-2026-85455 MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during desHigh 8.8 · Sep 3, 2026
- CVE-2026-85452 MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fHigh 8.7 · Sep 3, 2026
- CVE-2026-85451 MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicaHigh 7.1 · Sep 3, 2026
- CVE-2026-85450 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limitsHigh 8.7 · Sep 3, 2026
- CVE-2026-85443 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive witHigh 8.7 · Sep 3, 2026
- CVE-2026-85442 MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attackers to trigger unboHigh 8.7 · Sep 3, 2026
- CVE-2026-85441 MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.High 8.7 · Sep 3, 2026
- CVE-2026-85440 MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbCritical 9.3 · Sep 3, 2026
- CVE-2026-85436 MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memHigh 8.7 · Sep 3, 2026
- CVE-2026-85433 MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners atCritical 9.3 · Sep 3, 2026
- CVE-2026-85432 MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clieHigh 8.8 · Sep 3, 2026
- CVE-2026-85431 MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.High 8.7 · Sep 3, 2026
- CVE-2026-85430 MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them witHigh 8.8 · Sep 3, 2026
- CVE-2026-85428 MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write vaCritical 9.3 · Sep 3, 2026
- CVE-2026-85427 MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs byCritical 9.2 · Sep 3, 2026
- CVE-2026-85424 MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database Critical 9.3 · Sep 3, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.