CVE-2026-85426

Received Received - Intake

MOOS-IvP uMemWatch Command Injection Vulnerability

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85426

Affected Vendors & Products

Vendor	Product	Version / Range
moos-ivp	umemwatch	to 24.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

MOOS-IvP uMemWatch through 24.8.1 allows command injection via unsanitized MOOS client names. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.

Detection Guidance

Detecting this vulnerability requires checking for suspicious MOOS client names or unusual command execution patterns. Inspect logs for uMemWatch processes and look for client names containing shell metacharacters like semicolons, backticks, or pipes. Check for unexpected file redirections or processes spawned by uMemWatch.

Impact Analysis

An attacker could gain full control over the system running uMemWatch, execute arbitrary commands, steal data, or disrupt operations. The high CVSS scores indicate severe impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (health data security) requirements. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update MOOS-IvP uMemWatch to the latest version that patches command injection flaws. If an update is unavailable, restrict network access to MOOS clients and monitor uMemWatch processes closely. Disable untrusted client name inputs or sanitize them before processing.

Hi! I’m here to help you understand CVE-2026-85426. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70