# CVE-2026-85430: MOOS pShare authentication bypass in UDP listener

Source: https://junglewise.ai/threats/cve-2026-85430-moos-pshare-authentication-bypass-in-udp-listener  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-03. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85430 · Severity: critical · CVSS 9.1 · Published 2026-09-03

MOOS pShare is a distributed messaging relay used in robotics and autonomous systems to share data across multiple MOOS communities over the network. This vulnerability allows attackers to send spoofed UDP messages that are republished into a MOOS community under a false sender identity, or to crash the pShare process entirely. An attacker on the network can inject malicious commands, sensor readings, or navigation data, disrupting operations or enabling further compromise of autonomous systems.

Technologies: [MOOS Essential-Moos](https://junglewise.ai/threats/technologies/essential-moos). Vendors: [MOOS](https://junglewise.ai/threats/vendors/moos).

## Quick answers

**Is CVE-2026-85430 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85430 being exploited in the wild.

**How severe is CVE-2026-85430?** Critical severity, with a CVSS score of 9.1, published 3 September 2026.

**Which products and versions are affected?** MOOS Essential-Moos through 10.0.1.

**Is there a fix for CVE-2026-85430?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85430 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-85430?** Check whether you run MOOS Essential-Moos at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an authentication bypass in pShare's UDP listener (Listener.cpp). The listener accepts and republishes UDP datagrams from any source without validating the sender's identity or legitimacy, preserving the attacker-claimed identity in the message. The root cause is missing source authentication and validation on incoming UDP datagrams. An attacker with network access to the pShare listening port can send crafted datagrams to inject spoofed messages into the MOOS community, or send malformed packets to trigger a process crash. No patch information is currently available in the advisory. The attack requires network reachability to the pShare UDP listener port; no authentication is required.

## Affected products

- MOOS essential-moos through 10.0.1

## Timeline

- 2026-09-03: disclosed

## References

- [https://github.com/themoos/essential-moos](https://github.com/themoos/essential-moos)
- [https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp](https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pShare/Listener.cpp)

## Related threats

- [MOOS essential-moos buffer overflow in CMOOSUDPLink](https://junglewise.ai/threats/cve-2026-85436-moos-essential-moos-buffer-overflow-in-cmoosudplink)
- [MOOS essential-moos pShare authorization bypass in PSHARE_CMD](https://junglewise.ai/threats/cve-2026-85433-moos-essential-moos-pshare-authorization-bypass-in-pshare-cmd)
- [MOOS essential-moos UDP packet injection in pMOOSBridge](https://junglewise.ai/threats/cve-2026-85431-moos-essential-moos-udp-packet-injection-in-pmoosbridge)
- [MOOS essential-moos pAntler remote code execution](https://junglewise.ai/threats/cve-2026-85427-moos-essential-moos-pantler-remote-code-execution)