Is CVE-2026-85428 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-85428 being exploited in the wild.

How severe is CVE-2026-85428?

Critical severity, with a CVSS score of 9.8, published 3 September 2026.

Is there a fix for CVE-2026-85428?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-85428 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-85428?

Check whether you run MOOS Core-Moos at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-85428: MOOS core-moos authentication bypass in MOOSDB HTTP server

CVE-2026-85428 · Severity: critical · CVSS 9.8 · Published 2026-09-03

MOOS is a lightweight middleware system used in robotics and autonomous systems to manage communication between software components. The optional MOOSDB HTTP server, when enabled, contains a critical flaw that allows unauthenticated attackers to modify system variables (including commands that control actuators and safety overrides) by sending simple HTTP requests. This could enable attackers to take control of robotic systems or autonomous platforms without any credentials.

Technologies: MOOS Core-Moos. Vendors: MOOS.

Quick answers

Is CVE-2026-85428 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-85428 being exploited in the wild.
How severe is CVE-2026-85428?: Critical severity, with a CVSS score of 9.8, published 3 September 2026.
Which products and versions are affected?: MOOS Core-Moos through 10.4.0.
Is there a fix for CVE-2026-85428?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-85428 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-85428?: Check whether you run MOOS Core-Moos at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an authentication bypass in the MOOSDB HTTP server component (HTTPConnection.cpp) that fails to properly validate requests before allowing variable writes. Unauthenticated clients can send HTTP requests with variable names and values directly to the MOOSDB HTTP server port, bypassing all access controls. The vulnerability affects core-moos through version 10.4.0 and is reachable remotely over the network if the optional HTTP server is enabled. An attacker can modify any MOOS variable including actuator commands and safety override flags, potentially causing loss of control or unintended system behavior. A patch addressing the authentication bypass is expected to be available in a future release.

Affected products

MOOS core-moos through 10.4.0

Timeline

2026-09-03: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.