https://vulnerability.circl.lu/sightings/feed 2026-10-09T00:17:38.528165+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8994cf29-4d79-45af-a44e-3c287399f0b8/export 2026-10-09T00:17:38.549769+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8994cf29-4d79-45af-a44e-3c287399f0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117212656547817288", "content": "CVE-2026-85428: Critical auth bypass in MOOS core-moos \u226410.4.0. Unauthenticated attackers can write variables via MOOSDB HTTP server, hijacking actuators/overrides. CVSS 9.8. Unpatched. If you run MOOS, disable HTTP or restrict access NOW. Details: https://www.valtersit.com/cve/CVE-2026-85428/ #CVE #infosec #OTsecurity", "creation_timestamp": "2026-09-04T12:00:11.174209Z"} 2026-09-04T12:00:11.174209+00:00 https://vulnerability.circl.lu/sighting/39c67a9d-9bef-4c0c-a166-2009817aa267/export 2026-10-09T00:17:38.551776+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "39c67a9d-9bef-4c0c-a166-2009817aa267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85427", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munoflbrqg22", "content": "CVE-2026-85427 - essential-moos\nThe pAntler component of MOOS (versions up to 10.0.1) can be tricked into executing any program if an attacker sends a specially crafted mission file to the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#essentialmoos #themoos #CVE #infosec", "creation_timestamp": "2026-09-04T00:10:20.078413Z"} 2026-09-04T00:10:20.078413+00:00 https://vulnerability.circl.lu/sighting/07c874ce-bf6d-4919-920d-3e06e388be18/export 2026-10-09T00:17:38.551874+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07c874ce-bf6d-4919-920d-3e06e388be18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munodg4eww2o", "content": "\ud83d\udea8 CVE-2026-85428 \u2014 CVSS 9.3 CRITICAL\n\nMOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85428\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:51.932115Z"} 2026-09-04T00:08:51.932115+00:00 https://vulnerability.circl.lu/sighting/f994a28f-e60e-4b17-adf6-761dcfb95df2/export 2026-10-09T00:17:38.551953+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f994a28f-e60e-4b17-adf6-761dcfb95df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85427", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munod522id2o", "content": "\ud83d\udea8 CVE-2026-85427 \u2014 CVSS 9.2 CRITICAL\n\nMOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unaut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85427\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:43.617040Z"} 2026-09-04T00:08:43.617040+00:00 https://vulnerability.circl.lu/sighting/8e3ecdef-82ed-4410-8815-3a60fb394ab1/export 2026-10-09T00:17:38.552027+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8e3ecdef-82ed-4410-8815-3a60fb394ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85426", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocujoyo2t", "content": "\ud83d\udea8 CVE-2026-85426 \u2014 CVSS 9.3 CRITICAL\n\nMOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85426\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:33.488258Z"} 2026-09-04T00:08:33.488258+00:00 https://vulnerability.circl.lu/sighting/89d06121-6c70-45cf-934a-a6e31971aa4a/export 2026-10-09T00:17:38.552097+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "89d06121-6c70-45cf-934a-a6e31971aa4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocmhb522b", "content": "\ud83d\udea8 CVE-2026-85425 \u2014 CVSS 9.3 CRITICAL\n\nMOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:24.979698Z"} 2026-09-04T00:08:24.979698+00:00 https://vulnerability.circl.lu/sighting/ca6babb6-2b45-41e2-96ef-3e6286ff7270/export 2026-10-09T00:17:38.552168+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca6babb6-2b45-41e2-96ef-3e6286ff7270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocdsfxt2w", "content": "\ud83d\udea8 CVE-2026-85424 \u2014 CVSS 9.3 CRITICAL\n\nMOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:15.937805Z"} 2026-09-04T00:08:15.937805+00:00 https://vulnerability.circl.lu/sighting/33015b4a-ee99-401d-9062-f35d4d575c05/export 2026-10-09T00:17:38.552239+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "33015b4a-ee99-401d-9062-f35d4d575c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munlm7sryo22", "content": "CVE-2026-85428 - core-moos\nThe optional web interface in MOOS core (versions up to 10.4.0) does not require a login, so anyone who can reach the server can send commands that change system variables,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coremoos #themoos #CVE #infosec", "creation_timestamp": "2026-09-03T23:20:06.365675Z"} 2026-09-03T23:20:06.365675+00:00 https://vulnerability.circl.lu/sighting/0ac11a03-ad0e-455c-a657-e88b9b6bfd72/export 2026-10-09T00:17:38.552309+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0ac11a03-ad0e-455c-a657-e88b9b6bfd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85426", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munlm6b7vw2l", "content": "CVE-2026-85426 - moos-ivp\nThe uMemWatch component of MOOS-IvP builds command\u2011line strings using client names that an attacker can control. Because those names are not cleaned, a malicious name can contain special\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moosivp #CVE #infosec", "creation_timestamp": "2026-09-03T23:20:04.507185Z"} 2026-09-03T23:20:04.507185+00:00 https://vulnerability.circl.lu/sighting/958d09c6-b120-4dc4-ab28-0a676616b0dd/export 2026-10-09T00:17:38.552378+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "958d09c6-b120-4dc4-ab28-0a676616b0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85425", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munl2dit722y", "content": "CVE-2026-85425 - moos-ivp\nThe iSay component of MOOS\u2011IvP (versions up to 24.8.1) accepts text messages called SAY_MOOS and sends them straight to the operating system without checking them first. A malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moosivp #CVE #infosec", "creation_timestamp": "2026-09-03T23:10:06.043159Z"} 2026-09-03T23:10:06.043159+00:00