CVE-2026-85448: MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any network-reachable publisher that can send node-ping data to uFldShoreBroker can exploit it. No authentication, user interaction, or special privileges are required according to the supplied vector.
What is the operational impact?
An attacker can submit unbounded distinct community names, causing ShoreBroker to retain growing state in parallel vectors and perform increasing work on each pass. This can degrade performance and eventually exhaust memory, resulting in denial of service.
Which releases are affected?
MOOS-IvP uFldShoreBroker through version 24.8.1 is affected.
How can I determine whether an instance is under attack or affected in operation?
Look for unusually large or continually growing numbers of distinct claimed community names handled by uFldShoreBroker, accompanied by increasing memory consumption and degraded processing performance.