🚨 CVE-2026-85455
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication.
🎖@cveNotify
GitHub
GitHub - themoos/core-moos: A very light weight, easy to use middleware. You will need core-moos above all other components
A very light weight, easy to use middleware. You will need core-moos above all other components - themoos/core-moos
September 3, 2026 31
