CVE-2026-85443

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1

Description A denial of service issue exists in the MOOSCommServer::ListenLoop() function. The accept thread performs a blocking receive without a timeout during the wire-protocol handshake. An attacker can exploit this by opening a TCP connection to the MOOSDB port and sending no data, which causes the accept thread to block indefinitely while holding the socket-list lock, thereby preventing all subsequent client connections.

Recommendations Update core-moos to version 10.4.1 or later.