CVE-2026-85448

HighCVSS 7.5

Published: 03/09/2026(UTC)Translated: 04/09/2026(UTC)NVD NIST

Summary

uFldShoreBroker in MOOS-IvP through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.

Risk Assessment

An attack can slow down or halt the shore broker, disrupting communication between MOOS communities.

Recommendation

Implement a limit on the number of unique communities stored by uFldShoreBroker and monitor memory usage.

Other vulnerabilities in MOOS-IvP uFldShoreBroker

CVE-2026-85434Critical
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.

Original NVD description (English source)

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.