P4Verified

CVE-2026-85446: moos-ivp before 24.8.1 (exclusive), 0 through 24.8.1

CVE-2026-85446. CVSS 3.1 base score 7.5 (HIGH, Vendor/CNA). EPSS 0.0063 (percentile 0.48792), scored 13-Oct-2026.

Affected technology

moos-ivp · before 24.8.1 (exclusive)
mit

moos-ivp · 0 through 24.8.1
moos-ivp

Description’s affected range: versions through 24.8.1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic processing, delaying or preventing distribution of legitimate node reports. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.

Published 15-Oct-2026 01:10 UTC

CWE: CWE-407
CCR priority: 30.2 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Vendor/CNA
EPSS: 0.0063 · percentile 0.48792 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-85446.html