Memory Exhaustion Vulnerability in MOOS-IvP ShoreBroker by MOOS-IvP
CVE-2026-85448

8.7HIGH

Key Information:

Vendor

Moos-ivp

Status
Moos-ivp
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85448?

The MOOS-IvP ShoreBroker component prior to version 24.8.1 does not impose limits on the number of distinct community names a single publisher can submit. This lack of restriction leads to unbounded growth of retained state and increases per-pass workload. Consequently, this can result in significant memory exhaustion and degrade overall system performance.

Affected Version(s)

moos-ivp 0 <= 24.8.1

References

https://github.com/moos-ivp/moos-ivp/pull/133
issue-trackingpatch
https://github.com/moos-ivp/moos-ivp/commit/2cbaed2227db3...
patch
https://github.com/moos-ivp/moos-ivp
product

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vlatko Kosturjak
.