Moby Project Moby

Name: Moby Project Moby
Brand: Moby Project

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical6high8medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34040US	high7.8OT elevated	9.11% (95th)	Exploit	no fix	2026-03-31	≤ 29.3.1
CVE-2026-41567US	—	0.15% (5th)	Exploit	no fix	2026-06-05	≤ 29.5.1
CVE-2023-28840US	high8.7	2.56% (85th)	—	no fix	2023-04-04	2 versions
CVE-2021-41190US	medium5.0	2.22% (83rd)	—	no fix	2021-11-17	≤ 20.10.11
CVE-2023-28842US	medium6.8	1.44% (73rd)	—	no fix	2023-04-04	2 versions
CVE-2022-36109US	medium6.3OT elevated	1.04% (64th)	—	no fix	2022-09-09	≤ 20.10.18
CVE-2024-36620US	—	0.82% (57th)	—	no fix	2024-11-29	25.0.0 → 26.0.2
CVE-2024-29018US	high7.5	0.74% (55th)	—	no fix	2024-03-20	3 versions
CVE-2023-28841US	medium6.8OT elevated	0.69% (53rd)	—	no fix	2023-04-04	2 versions
CVE-2024-36623US	—	0.64% (51st)	—	no fix	2024-11-29	≤ 26.0.0
CVE-2024-36621US	—	0.63% (50th)	—	no fix	2024-11-29	≤ 26.0.0-rc2
CVE-2022-24769US	medium5.9	0.49% (42nd)	—	no fix	2022-03-24	≤ 20.10.14
CVE-2026-33997US	high8.1	0.39% (33rd)	—	no fix	2026-03-31	≤ 29.3.1
CVE-2024-32473US	medium6.5	0.35% (28th)	—	no fix	2024-04-18	≤ 26.0.2
CVE-2024-24557US	high7.8OT elevated	0.26% (18th)	—	no fix	2024-02-01	2 versions
CVE-2025-54388US	medium4.6	0.25% (16th)	—	no fix	2025-07-30	28.2.0 → 28.3.2
CVE-2025-54410US	medium5.2	0.17% (6th)	—	no fix	2025-07-30	≤ 28.0.0
CVE-2026-41568US	—	0.11% (1st)	—	no fix	2026-06-12	≤ 29.5.1
CVE-2026-42306US	high7.2	0.10% (1st)	—	no fix	2026-06-12	≤ 2.0.0-beta.14

showing 19 of 20

The flaw types (CWEs) most of these CVEs share.

CWE-636Not Failing Securely ('Failing Open')3 CVEs
CWE-755Improper Handling of Exceptional Conditions3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-420Unprotected Alternate Channel2 CVEs
CWE-61UNIX Symbolic Link (Symlink) Following2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-909Missing Initialization of Resource2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.