CVE-2026-85441: MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length

Q: Who can exploit this issue?

Any unauthenticated attacker that can reach the MOOSDB network port can send the crafted message. No credentials or user interaction are required.

Q: What is the operational impact of a successful exploit?

The crafted negative serialized string length triggers an unhandled exception in CMOOSMsg::operator>>, terminating the MOOSDB database process. The described impact is denial of service rather than data disclosure or modification.

Published Sep 3, 2026

Updated

MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process.

Affected Software

2 affected components

MOOS core-moos<=10.4.0

MOOSDB<=10.4.0

Event History

Sep 3, 2026

CVE Published

via MITRE·10:38 PM

Data Sourced

via MITRE·10:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Any unauthenticated attacker that can reach the MOOSDB network port can send the crafted message. No credentials or user interaction are required.

What is the operational impact of a successful exploit?

The crafted negative serialized string length triggers an unhandled exception in CMOOSMsg::operator>>, terminating the MOOSDB database process. The described impact is denial of service rather than data disclosure or modification.

Which deployments should be prioritized for remediation?

Prioritize MOOS core-moos and MOOSDB deployments running through version 10.4.0 where the MOOSDB port is reachable by untrusted networks or users. Network exposure is the key condition described for exploitation.