CVE-2026-85433

Received Received - Intake

MOOS pShare Unauthorized Route Reconfiguration Vulnerability

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85433

Affected Vendors & Products

Vendor	Product	Version / Range
moos	essential-moos	to 10.0.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in MOOS essential-moos pShare through 10.0.1 allows attackers to send crafted PSHARE_CMD messages to reconfigure network routes and listeners without proper authorization. Attackers can use cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.

Detection Guidance

Monitor network traffic for unexpected PSHARE_CMD messages with cmd=output or cmd=input parameters. Check for unauthorized listeners on arbitrary addresses using netstat or ss commands. Inspect MOOS essential-moos logs for suspicious reconfiguration attempts.

Impact Analysis

An attacker could intercept, modify, or duplicate sensitive data transmitted over the network. This could lead to unauthorized access to confidential information, data breaches, or disruption of network services. Systems relying on MOOS essential-moos pShare for communication are particularly at risk.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating GDPR's data protection requirements and HIPAA's security and privacy rules. Organizations using affected software may face compliance violations, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies

Update MOOS essential-moos to the latest version. Restrict network access to MOOS components using firewalls. Disable unnecessary PSHARE_CMD functionality if not required. Monitor for unusual traffic patterns or unauthorized listeners.

Hi! I’m here to help you understand CVE-2026-85433. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70