MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Sep 3, 2026 · NIST NVD

   Detected

   MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

2. Oct 14, 2026 · NIST NVD

   Updated

   MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

3. Oct 14, 2026 · NIST NVD

   Updated

   MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.

Affected

• cpe themoos/essential-moosversion unspecified
• vendor themoos essential-moosversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-85431

  MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-85431

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-85431

  30-day exploitation probability 3.4%

  first.org
• NIST NVDVulnerability recordCVE-2026-85431

  MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with

  nvd.nist.gov

References

• Product · github.com
• Issue Tracking · github.com
• Issue Tracking · github.com
• Issue Tracking · github.com
• Third Party Advisory · vulncheck.com