CVE-2026-85430

Received Received - Intake

Authentication Bypass in MOOS essential-moos via pShare UDP Spoofing

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local MOOS community under spoofed identities, or send malformed datagrams to crash the pShare process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85430

Affected Vendors & Products

Vendor	Product	Version / Range
moos	essential-moos	From 10.0.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

MOOS essential-moos through 10.0.1 has an authentication bypass flaw in pShare that allows UDP datagrams from any source to be accepted and republished with the attacker's claimed identity intact. Attackers can inject messages into the local MOOS community under spoofed identities or crash the pShare process by sending malformed datagrams.

Detection Guidance

Monitor UDP traffic to pShare input routes for unexpected datagrams. Check logs for messages with spoofed identities or malformed datagrams. Use network sniffing tools like tcpdump or Wireshark to inspect UDP traffic on ports used by MOOS essential-moos.

Impact Analysis

This vulnerability allows attackers to impersonate legitimate users or systems within the MOOS community, potentially leading to unauthorized access, data manipulation, or denial of service by crashing the pShare process. It compromises the integrity and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality and integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, or reputational damage due to compromised data protection.

Mitigation Strategies

Restrict UDP datagram sources to trusted IPs using firewall rules. Update MOOS essential-moos to the latest version. Disable pShare input routes if not required. Monitor for crashes or unauthorized message injections.

Hi! I’m here to help you understand CVE-2026-85430. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70