Denial of Service Vulnerability in MOOS-IvP pRealm
CVE-2026-85447

8.7HIGH

Key Information:

Vendor

Moos-ivp

Status
Moos-ivp
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85447?

The pRealm component of MOOS-IvP, up to version 24.8.1, is vulnerable due to its acceptance of unbounded REALMCAST_REQ subscriptions. This flaw allows attackers to create long-lived subscriptions with a large number of variables, leading to sustained excessive output generation. Consequently, these unvalidated subscriptions can exhaust system resources, potentially resulting in service interruptions or a denial of service.

Affected Version(s)

moos-ivp 0 <= 24.8.1

References

https://github.com/moos-ivp/moos-ivp/pull/132
issue-trackingpatch
https://github.com/moos-ivp/moos-ivp/commit/8a4bb9d9154a7...
patch
https://github.com/moos-ivp/moos-ivp
product

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vlatko Kosturjak
.