CVE-2026-85451
CVE-2026-85451
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process shutdown by exploiting the default multicast group and port with the known passphrase.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-85451?
- CVE-2026-85451 is a high-severity vulnerability, classified under Use of Hard-coded Credentials. CVSS score: 7.1/10. Published 2026-09-03.
- How severe is CVE-2026-85451?
- High severity. CVSS v3 base score is 7.1 out of 10.