CVE-2026-85451

MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process shutdown by exploiting the default multicast group and port with the known passphrase.

• CWE-798

• https://github.com/themoos/core-moosProduct
• https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Comms/SuicidalSleeper.cpp#L45Issue Tracking, Patch
• https://github.com/themoos/core-moos/commit/488806a07db9f21eea124f48a9c0392f058f01dcIssue Tracking, Patch
• https://github.com/themoos/core-moos/pull/85Issue Tracking, Patch
• https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-remote-process-termination-via-hard-coded-multicast-passphraseThird Party Advisory

Published

Sep 3, 2026

Last Modified

Oct 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85446MOOS-IvP versions through 24.8.1 contain a quadratic process…7.5
• CVE-2026-85447MOOS-IvP pRealm through version 24.8.1 accepts unbounded REA…7.5
• CVE-2026-85448MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the n…7.5
• CVE-2026-85449MOOS-IvP pMarineViewer through 24.8.1 fails to limit the num…7.5
• CVE-2026-8545Object corruption in Compositing in Google Chrome prior to 1…3.1
• CVE-2026-85450MOOS core-moos through 10.4.0 contains a denial of service v…7.5
• CVE-2026-85452MOOS ui-moos through 50b9c6c contains a buffer overflow vuln…8.8
• CVE-2026-85453MOOS core-moos through 10.4.0 fails to escape database conte…6.1
• CVE-2026-85454MOOS core-moos through 10.4.0 contains a buffer overflow vul…6.1
• CVE-2026-85455MOOS core-moos through 10.4.0 contains a buffer over-read vu…8.2
• CVE-2026-85456MOOS-IvP through 24.8.1 fails to properly validate variable …5.5
• CVE-2026-85457IBM Planning Analytics 2.0, and 2.1 could allow a remote aut…8.1