SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85452

HIGH · CVSS 8.8 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A buffer overflow vulnerability exists in the MOOS user interface, specifically in ScopeTabPane.cpp and ScopeGrid.cpp, where fixed 1024-byte buffers are improperly handled during the formatting of client and variable names. This flaw allows attackers to exploit the system by supplying excessively long identifiers, potentially leading to arbitrary code execution. Organizations using affected versions of MOOS should prioritize patching this vulnerability to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85452
Severity
HIGH
CVSS
8.8
EPSS
0.38%

Original NVD Description

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the buffers when an operator selects process list entries or pokes variables, enabling code execution.