SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85427

HIGH · CVSS 8.1 EPSS 0.42% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated attackers to execute arbitrary code on systems running the affected version of MOOS essential-moos pAntler by sending a specially crafted MISSION_FILE message to the MOOSDB. This remote code execution risk poses a significant threat, as it enables the execution of malicious commands without any authentication checks. Organizations utilizing this software should prioritize patching or mitigating this vulnerability to protect their systems from potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85427
Severity
HIGH
CVSS
8.1
EPSS
0.42%

Original NVD Description

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSION_FILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntler parses and executes via execvp() without authentication validation.