CVE-2026-85450
CVE-2026-85450
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-85450?
- CVE-2026-85450 is a high-severity vulnerability, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-09-03.
- How severe is CVE-2026-85450?
- High severity. CVSS v3 base score is 7.5 out of 10.