VULNERABILITY INTELLIGENCE
CVE-2026-85426
CVSS score9.8 CRITICAL
EPSS probability0.92%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.
Weakness classification
- disclosure@vulncheck.com: CWE-78