CVE-2026-85446
CVE-2026-85446
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic processing, delaying or preventing distribution of legitimate node reports.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-85446?
- CVE-2026-85446 is a high-severity vulnerability, classified under Inefficient Algorithmic Complexity. CVSS score: 7.5/10. Published 2026-09-03.
- How severe is CVE-2026-85446?
- High severity. CVSS v3 base score is 7.5 out of 10.