PatchTheCVEcore-moos vulnerabilities and fixes
Recent CVEs affecting core-moos, with upgrade or downgrade steps. 12 tracked.
Also searched as: core moos.
core-moos has 12 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-09-03. Highest priority: CVE-2026-85440 (score 55/100).
- CVE-2026-85455 HIGH 8.2 UPGRADE MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte pack
- CVE-2026-85454 MEDIUM 6.1 UPGRADE MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that
- CVE-2026-85453 MEDIUM 6.1 UPGRADE MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing att
- CVE-2026-85451 HIGH 7.1 UPGRADE MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper compo
- CVE-2026-85450 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that create
- CVE-2026-85443 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where
- CVE-2026-85442 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(),
- CVE-2026-85441 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::o
- CVE-2026-85440 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet
- CVE-2026-85424 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to c
- CVE-2026-85428 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP serv
- CVE-2026-85432 HIGH 8.2 UPGRADE MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authent
FAQ
How do I fix core-moos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is core-moos being exploited right now?
None of the tracked core-moos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which core-moos CVE should I patch first?
CVE-2026-85440 currently ranks highest (55/100): MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet .