CVE-2026-85454
Medium
Description
MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one byte past the serial telegram stack buffer. Attackers controlling the serial line can send a full-length telegram to trigger the off-by-one write, corrupting the stack and potentially enabling code execution.
SeverityMedium
CVSS6.1
Exploit probability—
ProductThemoos Core-moos
PublishedSep 3, 2026
First seenSep 3, 2026
Weakness typeCWE-193CWE-193
How to fix
Update
- themoos core-moos10.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| themoos core-moos | v < 10.4.0 | 10.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.