MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Sep 3, 2026 · NIST NVD

   Detected

   MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability.

2. Oct 14, 2026 · NIST NVD

   Updated

   MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability.

Affected

• cpe themoos/core-moosversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-85450

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-85450

  30-day exploitation probability 0.6%

  first.org
• NIST NVDVulnerability recordCVE-2026-85450

  MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service

  nvd.nist.gov

References

• Product · github.com
• Issue Tracking · github.com
• Issue Tracking · github.com
• Issue Tracking · github.com
• Third Party Advisory · vulncheck.com