CVE-2026-85435
MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
Published Sep 3, 2026 · updated Oct 14, 2026 · moos-ivp moos-ivp
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and control information.
Timeline
Detection, updates, and resolution for this record.
Sep 3, 2026 · NIST NVD
Detected
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and control information.
Oct 14, 2026 · NIST NVD
Updated
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and control information.
Affected
- cpe mit/moos-ivpversion unspecified
- vendor moos-ivp moos-ivpversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-85435
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including
vulnerability.circl.lu - CVE.orgCVE-2026-85435
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-85435
30-day exploitation probability 0.3%
first.org - NIST NVDCVE-2026-85435
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including
nvd.nist.gov