PatchTheCVEthemoos vulnerabilities
Recent CVEs affecting themoos products. 17 tracked.
themoos has 17 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 17. Most recent: 2026-09-03. Highest priority: CVE-2026-85433 (score 61/100).
- CVE-2026-85455 HIGH 8.2 UPGRADE MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte pack
- CVE-2026-85454 MEDIUM 6.1 UPGRADE MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that
- CVE-2026-85453 MEDIUM 6.1 UPGRADE MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing att
- CVE-2026-85451 HIGH 7.1 UPGRADE MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper compo
- CVE-2026-85450 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that create
- CVE-2026-85443 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where
- CVE-2026-85442 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(),
- CVE-2026-85441 HIGH 7.5 UPGRADE MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::o
- CVE-2026-85440 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet
- CVE-2026-85436 HIGH 7.5 UPGRADE MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray(
- CVE-2026-85424 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to c
- CVE-2026-85431 HIGH 7.5 UPGRADE MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in p
- CVE-2026-85433 CRITICAL 9.8 UPGRADE MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publis
- CVE-2026-85427 HIGH 8.1 UPGRADE MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthen
- CVE-2026-85428 CRITICAL 9.8 UPGRADE MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP serv
- CVE-2026-85430 CRITICAL 9.1 UPGRADE MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP
- CVE-2026-85432 HIGH 8.2 UPGRADE MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authent
FAQ
How do I fix themoos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is themoos being exploited right now?
None of the tracked themoos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which themoos CVE should I patch first?
CVE-2026-85433 currently ranks highest (61/100): MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publis.