CVE-2026-71646
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback() in swarm_exploration/exploration_manager/src/fast_exploration_fsm.cpp.
Risk Assessment
An attacker can cause unavailability of the robotic system, potentially disrupting swarm operations and causing operational downtime.
Recommendation
Update RACER to a patched version and consider restricting access to the system's control interfaces.
Other vulnerabilities in RACER
See all- CVE-2026-71644Critical
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE.
- CVE-2026-71645High
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER, tested affected version commit abcdef1234567890, allows an attacker to cause a denial of service via the exploration state machine.
Original NVD description (English source)
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback() in swarm_exploration/exploration_manager/src/fast_exploration_fsm.cpp
Vulnerability data from NVD (NIST) · CISA KEV · EPSS