Description
MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.
Published: 2026-09-03
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Unauthenticated write access to MOOS variables via HTTP
Action: Immediate Patch
AI Analysis

Impact

MOOS core-moos through version 10.4.0 contains an authentication bypass flaw in the optional MOOSDB HTTP server. The flaw allows any client that can reach the HTTP port to send requests with variable names and values, resulting in unauthorized modification of MOOS variables, including actuator and override commands. This can compromise the integrity of the system and enable an attacker to influence vehicle behavior or other sensitive control processes.

Affected Systems

The affected product is MOOS core-moos, specifically all releases up to and including version 10.4.0. Users running these versions on any host that exposes the MOOSDB HTTP server are at risk.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.3, indicating a high severity level. While the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the lack of authentication means any machine that can reach the HTTP service can exploit it. The attack is remote and requires no special credentials, making the risk of exploitation significant for exposed deployments.

Generated by OpenCVE AI on September 3, 2026 at 23:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update core-moos to a version newer than 10.4.0 that contains the fix for the authentication bypass in the MOOSDB HTTP server.
  • If an update is not yet available, disable the MOOSDB HTTP server or block its listening port (default 5238) from all external traffic.
  • Configure a firewall to allow the HTTP port only from trusted IP addresses or internal networks, thereby limiting the potential attackers’ reach.

Generated by OpenCVE AI on September 3, 2026 at 23:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Themoos
Themoos core-moos
Vendors & Products Themoos
Themoos core-moos

Thu, 03 Sep 2026 22:45:00 +0000

Type Values Removed Values Added
Description MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables including actuator and override commands without authentication.
Title MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Themoos Core-moos
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-14T13:50:51.563Z

Reserved: 2026-09-03T19:50:53.505Z

Link: CVE-2026-85428

cve-icon Vulnrichment

Updated: 2026-09-14T13:48:33.774Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-03T23:17:21.770

Modified: 2026-09-14T14:17:13.663

Link: CVE-2026-85428

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T15:21:41Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function