themoos records

17 published records for vendor themoos.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-85440No exploit	MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Lengththemoos · core-moos · CWE-787 Pre-auth Memory safety	Critical9.3	—	1.0%	Sep 3, 2026
37Monitor	CVE-2026-85428No exploit	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Writethemoos · core-moos · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.8%	Sep 3, 2026
37Monitor	CVE-2026-85424No exploit	MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEARthemoos · core-moos · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.8%	Sep 3, 2026
37Monitor	CVE-2026-85433No exploit	MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfigurationthemoos · essential-moos · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.7%	Sep 3, 2026
36Monitor	CVE-2026-85427No exploit	MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEthemoos · essential-moos · CWE-494 pre-auth RCE Auth bypass	Critical9.2	—	0.5%	Sep 3, 2026
35Monitor	CVE-2026-85431No exploit	MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injectionthemoos · essential-moos · CWE-345 Pre-auth	High8.7	—	3.3%	Sep 3, 2026
35Monitor	CVE-2026-85436No exploit	MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Lengththemoos · essential-moos · CWE-191 Pre-auth Memory safety	High8.7	—	2.0%	Sep 3, 2026
35Monitor	CVE-2026-85430No exploit	MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishingthemoos · essential-moos · CWE-345 Pre-auth Auth bypass	High8.8	—	1.6%	Sep 3, 2026
35Monitor	CVE-2026-85455No exploit	MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packetthemoos · core-moos · CWE-125 Pre-auth Deserialization Memory safety	High8.8	—	0.6%	Sep 3, 2026
35Monitor	CVE-2026-85432No exploit	MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identitythemoos · core-moos · CWE-290 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 3, 2026
34Monitor	CVE-2026-85442No exploit	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocationthemoos · core-moos · CWE-789 Pre-auth	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85441No exploit	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengththemoos · core-moos · CWE-195 Pre-auth	High8.7	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85450No exploit	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustionthemoos · core-moos · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85443No exploit	MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Servicethemoos · core-moos · CWE-400 Pre-auth Denial of service	High8.7	—	0.6%	Sep 3, 2026
28Monitor	CVE-2026-85451No exploit	MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrasethemoos · core-moos · CWE-798 Pre-auth Hard-coded credentials	High7.1	—	0.3%	Sep 3, 2026
21Monitor	CVE-2026-85453No exploit	MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scriptingthemoos · core-moos · CWE-79 Pre-auth XSS	Medium5.3	—	0.3%	Sep 3, 2026
20Monitor	CVE-2026-85454No exploit	MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handlingthemoos · core-moos · CWE-193	Medium5.2	—	0.3%	Sep 3, 2026

CVE-2026-85440
37Monitor
MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Memory safety
themoos · core-moosSep 3, 2026
CVE-2026-85428
37Monitor
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85424
37Monitor
MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85433
37Monitor
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themoos · essential-moosSep 3, 2026
CVE-2026-85427
36Monitor
MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
themoos · essential-moosSep 3, 2026
CVE-2026-85431
35Monitor
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
HighCVSS 8.7No exploitEPSS 3%
- Pre-auth
themoos · essential-moosSep 3, 2026
CVE-2026-85436
35Monitor
MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
HighCVSS 8.7No exploitEPSS 2%
- Pre-auth
- Memory safety
themoos · essential-moosSep 3, 2026
CVE-2026-85430
35Monitor
MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
themoos · essential-moosSep 3, 2026
CVE-2026-85455
35Monitor
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
HighCVSS 8.8No exploitEPSS 0%
themoos · core-moosSep 3, 2026
CVE-2026-85432
35Monitor
MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85442
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
themoos · core-moosSep 3, 2026
CVE-2026-85441
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
themoos · core-moosSep 3, 2026
CVE-2026-85450
34Monitor
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
themoos · core-moosSep 3, 2026
CVE-2026-85443
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
themoos · core-moosSep 3, 2026
CVE-2026-85451
28Monitor
MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
themoos · core-moosSep 3, 2026
CVE-2026-85453
21Monitor
MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
themoos · core-moosSep 3, 2026
CVE-2026-85454
20Monitor
MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling
MediumCVSS 5.2No exploitEPSS 0%
themoos · core-moosSep 3, 2026