CVE-2026-71644
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE.
Risk Assessment
An attacker could cause drone collisions, potentially leading to equipment damage, injury, or mission disruption. This risk affects organizations using the RACER system for drone swarm control.
Recommendation
Update RACER to a version containing the fix or apply a workaround by adding a default case in the FSM. Consider implementing additional safeguards against unauthorized trajectory control.
Other vulnerabilities in RACER
See all- CVE-2026-71646High
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback() in swarm_exploration/exploration_manager/src/fast_exploration_fsm.cpp.
- CVE-2026-71645High
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER, tested affected version commit abcdef1234567890, allows an attacker to cause a denial of service via the exploration state machine.
Original NVD description (English source)
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE
Vulnerability data from NVD (NIST) · CISA KEV · EPSS