P4Verified

CVE-2026-85431: essential-moos through 10.0.1 (inclusive), 0 through 10.0.1

CVE-2026-85431. CVSS 3.1 base score 7.5 (HIGH, Vendor/CNA). EPSS 0.02845 (percentile 0.86348), scored 13-Oct-2026.

Affected technology

essential-moos · through 10.0.1 (inclusive)
themoos

essential-moos · 0 through 10.0.1
themoos

Description’s affected range: through version 10.0.1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and availability impact as none; integrity impact as high.

Published 14-Oct-2026 15:58 UTC

CWE: CWE-345
CCR priority: 30.7 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · Vendor/CNA
EPSS: 0.02845 · percentile 0.86348 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-14 15:56:36.793806+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-85431.html