Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH Severity: CVE-2026-85455 (CVSS 8.2) MOOS core-moos ≤10.4.0 buffer over-read in CMOOSCommPkt. Unauthenticated attackers can send crafted packets to MOOSDB port triggering out-of-bounds memory access. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/EsLA5eN88a
Post summary
The tweet announces CVE-2026-85455 as a high‑severity buffer over‑read vulnerability in MOOS core‑moos and urges an immediate patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | themoos | core-moos | - | - | - |