CVE-2026-85443
MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
Published Sep 3, 2026 · updated Oct 14, 2026 · themoos core-moos
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the accept thread to block indefinitely while holding the socket-list lock, preventing all subsequent client connections.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Sep 3, 2026 · NIST NVD
Detected
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the accept thread to block indefinitely while holding the socket-list lock, preventing all subsequent client
Oct 14, 2026 · NIST NVD
Updated
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the accept thread to block indefinitely while holding the socket-list lock, preventing all subsequent client
Affected
- cpe themoos/core-moosversion unspecified
- vendor themoos core-moosversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-85443
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no da
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-85443
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-85443
30-day exploitation probability 0.6%
first.org - NIST NVDVulnerability recordCVE-2026-85443
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no da
nvd.nist.gov