Description
MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.
Published: 2026-09-03
Score: 9.3 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

MOOS core-moos through version 10.4.0 contains an authentication bypass flaw in the optional MOOSDB HTTP server. The flaw allows any client that can reach the HTTP port to send requests with variable names and values, resulting in unauthorized modification of MOOS variables, including actuator and override commands. This can compromise the integrity of the system and enable an attacker to influence vehicle behavior or other sensitive control processes.

Affected Systems

The affected product is MOOS core-moos, specifically all releases up to and including version 10.4.0. Users running these versions on any host that exposes the MOOSDB HTTP server are at risk.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.3, indicating a high severity level. While the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the lack of authentication means any machine that can reach the HTTP service can exploit it. The attack is remote and requires no special credentials, making the risk of exploitation significant for exposed deployments.

Generated by OpenCVE AI on September 3, 2026 at 23:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update core-moos to a version newer than 10.4.0 that contains the fix for the authentication bypass in the MOOSDB HTTP server.
  • If an update is not yet available, disable the MOOSDB HTTP server or block its listening port (default 5238) from all external traffic.
  • Configure a firewall to allow the HTTP port only from trusted IP addresses or internal networks, thereby limiting the potential attackers’ reach.

Generated by OpenCVE AI on September 3, 2026 at 23:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 03 Sep 2026 22:45:00 +0000

Type Values Removed Values Added
Description MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.
Title MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-03T22:38:23.092Z

Reserved: 2026-09-03T19:50:53.505Z

Link: CVE-2026-85428

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-03T23:17:21.770

Modified: 2026-09-03T23:17:21.770

Link: CVE-2026-85428

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-03T23:30:11Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function