EUVD-2026-70783

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODEREPORT messages, allowing attackers to exhaust memory by supplying unbounded distinct node names. Attackers can publish crafted NODEREPORT data to cause memory exhaustion and stall the operator...

EUVD-2026-70790

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

EUVD-2026-70781

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCASTREQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources...

EUVD-2026-70782

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...

EUVD-2026-70779

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

EUVD-2026-70780

MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic...

EUVD-2026-70778

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

EUVD-2026-70803

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

EUVD-2026-70806

MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODEBROKERPING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses...

EUVD-2026-70801

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

EUVD-2026-70802

MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction where dimension, piece, and degree counts from encoded BHVIPF payloads are used as allocation sizes and loop bounds without validation. Attackers can supply crafted payloads with mismatched dimension values to...

EUVD-2026-70815

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

CVE-2026-85456

MOOS-IvP through version 24.8.1 is affected by a path traversal vulnerability in the SplitHandler component (located in ivp/src/lib_logutils/SplitHandler.cpp). The root cause is improper validation of variable names extracted from alog files: attackers can supply crafted alog files containing bac...

CVE-2026-85449

MOOS-IvP pMarineViewer through version 24.8.1 is vulnerable to unbounded memory consumption via NODE_REPORT messages. The component fails to limit the number of tracked node identities, so an attacker can publish crafted data with distinct node names to exhaust memory and stall the operator displ...

CVE-2026-85448

MOOS-IvP uFldShoreBroker through version 24.8.1 contains an unbounded community state retention vulnerability in ShoreBroker::handleMailNodePing() . The function fails to limit the number of claimed community names stored in parallel vectors, allowing a single network publisher to supply unbounde...

CVE-2026-85446

MOOS-IvP versions through 24.8.1 are affected by a quadratic processing vulnerability in the uFldNodeComms component. Each new node identity creates a ledger entry and triggers all-pairs distribution work, allowing a network-based attacker to supply unbounded distinct node names in reports and dr...

CVE-2026-85447

MOOS-IvP pRealm (through version 24.8.1 ) accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. The flaw resides in the pipeway handling code (PipeWay.cpp, line 109), where an attacker can register long-lived pipeways carrying many variables, causing p...

CVE-2026-85445

MOOS-IvP (through version 24.8.1) is vulnerable to a denial of service in the Demuxer::addMuxPacket() function, which trusts the packet count declared in mux headers without validation. A remote, unauthenticated attacker can declare arbitrarily large packet counts to trigger unbounded memory allo...

CVE-2026-85444

MOOS-IvP through version 24.8.1 contains a buffer over-read vulnerability in the isQuoted(), isBraced(), and isChevroned() functions within MBUtils.cpp. These functions strip whitespace from input but then index using the original string length , causing reads past buffer bounds. An attacker can ...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a command injection vulnerability in alogsplit 's SplitHandler::handlePreCheckSplitDir() function, which fails to sanitize shell metacharacters in log file pathnames. An attacker can embed shell syntax in log file names or the --dir parameter to execute arbitrary ...